Information Security Engineer

What can you tell your friends when they ask what you do

I'm the person making sure that when millions of Filipinos use Go Rewards -- earning points at Robinsons, booking flights on Cebu Pacific, redeeming rewards through partner banks -- their data and transactions are protected. I own DAVI's security posture end-to-end: from the tools that detect threats in real time, to the policies that keep us audit-ready, to the vendor relationships that extend our security coverage across a growing coalition of partners. In a business built on member trust and partner confidence, I'm one of the people making sure that trust is never the thing that breaks.

Responsibilities – How will you do this

Security Architecture and Implementation

• Implement and maintain encryption, identity and access management (IAM), web application firewalls (WAF), and intrusion detection systems across all loyalty infrastructure and digital channels
• Support the design and enforcement of secure software development lifecycle (SDLC) practices across Engineering, ensuring security is embedded in how the team builds, not bolted on after
• Assess and harden security configurations across cloud environments (AWS, Azure, Google) and on-premises systems in alignment with architecture standards

Threat Detection and Incident Response

• Manage and operate endpoint detection and response (EDR) and managed detection and response (MDR) tooling across DAVI's device and infrastructure estate
• Lead vulnerability scanning, penetration testing coordination, and remediation tracking across all systems and platforms
• Own incident response coordination: triage, containment, root cause analysis, and post-incident documentation for security events

Compliance and Audit Readiness

• Maintain DAVI's readiness against ISO 27001, NIST, and relevant Philippine data privacy and cybersecurity regulations
• Prepare and maintain security documentation, audit trails, and evidence packages required for internal and external audits
• Monitor regulatory developments in data privacy and cybersecurity relevant to the loyalty and financial services ecosystem and translate these into actionable policy updates

Vendor and Managed Services Governance

• Govern security-related vendor relationships, including the JGCIT-managed security scope under the TAP managed services contract
• Review and assess third-party vendor security postures as part of partner onboarding and integration reviews
• Ensure contractual security obligations with partners and vendors are defined, tracked, and enforced

Enterprise AI and Emerging Technology Governance

• Support the development and enforcement of Enterprise AI governance policies, ensuring AI tools and models adopted across DAVI meet security and data privacy standards
• Assess the security implications of new technologies, platforms, and integrations before they are deployed into production
• Work with the Head of Architecture, Platforms, and Security to translate emerging threat intelligence into updated security controls and standards

Security Awareness and Cross-Functional Collaboration

• Partner with Technology, Product, Data, and Legal to ensure security requirements are embedded into project delivery, not raised as blockers at the end
• Conduct security awareness initiatives across the organization, building a culture where security is everyone's baseline responsibility
• Provide clear, non-technical security guidance to business stakeholders when evaluating new tools, processes, or partner integrations

To be successful, you'll need

• 5 to 8+ years of experience in information security, cybersecurity engineering, or a closely related technical security role -- with hands-on exposure to both infrastructure and application security in a complex, multi-system environment.
• Proven technical depth across core security domains: IAM, WAF, encryption, EDR/MDR, vulnerability management, and secure SDLC -- with the ability to operate these tools independently, not just oversee vendors who do.
• Solid working knowledge of ISO 27001, NIST Cybersecurity Framework, and Philippine data privacy regulations (Data Privacy Act of 2012) -- including what audit readiness actually looks like in practice, not just on paper.
• Experience managing cloud security across at least one major provider (AWS, Azure, or Google Cloud), including security configuration, access controls, and monitoring.
• Ability to assess and govern third-party and vendor security postures -- including reviewing contracts, conducting security assessments, and holding vendors accountable to defined standards.
• Strong analytical and risk judgment: able to prioritize threats by actual business impact, communicate risk clearly to non-technical stakeholders, and make defensible security decisions under time pressure.
• Familiarity with AI governance frameworks and the security implications of enterprise AI adoption -- including data handling, model access controls, and privacy risk -- is a strong advantage given DAVI's direction.

About Data Analytics Ventures Inc. (DAVI)

Founded in 2019, DAVI is the Gokongwei Group's loyalty and data analytics company and the team behind Go Rewards, the Philippines fastest-growing loyalty program.

We exist to make life more rewarding for every Filipino. Through Go Rewards, we connect millions of members with brands across retail, travel, banking, fuel, and lifestyle, creating experiences that are simpler, more personal, and more meaningful every day. Our ambition is clear: to build the biggest and best loyalty program in the Philippines, and eventually, in Asia.

But Go Rewards is only part of what we do. DAVI is also a data and insights company. We help our partners across the Gokongwei Group and beyond understand their customers better, identify growth opportunities, and make smarter business decisions. Data isn't just what we work with. It's how we think.

Why work at DAVI

At DAVI, you'll be part of a team building something that matters at scale. You'll work alongside people who are sharp, hungry, and genuinely good at what they do, in an environment that values open dialogue, constructive challenge, and continuous learning.

We believe that rewards start at home. Our People & Culture team is committed to making life at DAVI more meaningful through programs that support your growth, a culture that respects your contribution, and work that connects to a purpose bigger than any single role.

What we stand for

As part of the Gokongwei Group, we are guided by three core values that shape how we work and how we show up for each other.

• Entrepreneurial Mindset. We pursue growth with resilience, passion, and agility. We are not afraid to challenge the status quo, move fast, and find better ways to serve our customers and partners.

• Stewardship. We take full responsibility for what is entrusted to us, our people, our data, our resources, and our relationships. We manage all of it with care, with sustainability in mind, and with a long-term view.

• Integrity. We do the right thing, always, not because someone is watching, but because it is who we are. We hold ourselves to high standards in every decision, every interaction, and every commitment we make.

If you're passionate about data, loyalty, and building things that last, and you want to do it with people who share these values, DAVI is where you want to be.

Privacy Notice

DAVI values your privacy. Personal data collected as part of your application will be processed in accordance with this Privacy Notice: https://www.davi.com.ph/EECG-privacy-notice