InfoSec Manager (Hiring Immediately)
First Circle is a fast-growing, profitable, credit-led SME NeoBank in the Philippines whose shareholders include the World Bank Group (IFC). Today, our Business Credit Line and Business Bank Accounts are used by thousands of SMEs to grow and run their business. Our product velocity has accelerated — in the next few months we’ll release SME Corporate Cards, Payroll, Invoices, and Solar Financing — redefining the SME NeoBank category through software, financial products, and exceptional risk models.
Our culture emphasises building, problem solving, ownership / responsibility, and personal & professional growth. We balance a collegiate atmosphere with free & direct communication which enables us to move very quickly and avoid politics or toxicity. Our team continues to level up quickly, necessary for business to compound more than 100% per year, which we achieve through individual growth and bar-raiser hiring
Requirements
This is a unique opportunity for a high growth individual to become the first dedicated security professional at a high-growth, regulated bank whose market leadership position lies in its technology.
You will define strategy, priorities, and our security operating model aligned to business goals – reporting to the VP Engineering and supported in your development by our world-class CISO Board advisor.
As the company continues to grow you’ll have unparalleled opportunities for career growth and to build out our infosec team around you.
Your first year is about building foundations, addressing primary risks, and ensuring the bar you set is consistently upheld by the wider technology organisation:
- ISO 27001 certified. You own the certification from scoping to audit pass.
- Implement external pen test & remediation. Every finding closed or formally risk-accepted.
- MSSP/SOC live and producing alerts we act on. SLAs measured monthly. Escalation path drilled at least twice.
- Engineering development processes aligned with security. Embed secure-by-design principles into technology and product development, working closely with engineering and DevOps teams. Full audit trail.
- Regulatory compliance. Design, implement, and maintain security policies, standards, and procedures aligned to global standards and local regulations: BSP circulars, EPFS and PPMI (payments) requirements, and PCI DSS scope.
- Mitigate user & device threats. Define, assess, and upgrade the law of least privilege across users & devices. No unmanaged device touches production.
- A risk register used monthly by the exec team and Board. Internal and external (eg. vendor, supply chain) risks. Tied to mitigation owners and dates.
- Develop a strong culture & training practice. Phishing simulation, secure-coding standards, IR runbook drilled live at least once.
- Tooling. Evaluate and implement security tools and technologies, optimising for a lean, scalable security stack. Oversee vulnerability management and remediation, ensuring regular scanning, prioritisation, and tracking of fixes.
What you own steady-state
The strategy and roadmap with the exec team and Board Risk Committee. The MSSP relationship. Incident response. Vulnerability management. Third-party risk — particularly card processors, payment rails, KYC providers. BSP cybersecurity engagement and PCI DSS scope where it applies. Security culture — making it easier to do the right thing than the wrong thing.
About You
- You've built a security function before, hands-on. Not advised — built. At a regulated fintech, payments business or bank. Be ready to walk us through what was there when you arrived and what was there when you left.
- You've led a Sev-1 from page to post-mortem. Tell us about one.
- You've taken an organisation through ISO 27001 as the responsible owner, not a consultant on the sidelines.
- You've stood up an MSSP — chosen the vendor, defined the use cases, tuned the alerts, fired one when it underperformed.
- You've written IAM policy that survived contact with real engineers. Azure-native (that's our stack).
- You're hands-on enough to read Terraform, open a PR, and debug events. If your last line of code was 5+ years ago, this isn't your role.
- Certifications — CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor are useful signals. They're a tiebreaker, not the bar.
What this role is not
- Not a CISO inheriting a team — you'll build it. Year 1 you may have one or two hires.
- Not a paper-driven compliance role — we expect you in the codebase, in the cloud console, on the on-call rotation when it matters.
- Not for someone who needs a clean SOC 2 starting point. We're earlier than that, by design, and moving fast.
Benefits
- No fixed budget for this]]>
Recommended Jobs
.NET Developer
.NET Developer, C#, .NET 10.0, Angular 21 - London (Tech stack: .NET Developer, .NET 10.0, ASP.NET Core, C# 14, Azure SQL, .NET MAUI, GitHub Copilot, Docker, Kubernetes, Microservices architecture, A…
Geography Teacher - High-Achieving Mixed School - Croydon...
Geography Teacher - High-Achieving Mixed School - Croydon (September Start) Are you a hard-working, motivated and driven teacher who wants good support and career progression? • Geography Teacher …
Teacher of Geography - Permanent Role | Haringey |...
A secondary school in Haringey is seeking a Teacher of Geography to join its Humanities department from September. The successful candidate will teach Geography across KS3 and KS4, delivering less…
Flexible Waiter Grand Recruitment Day - Restaurants
Press space or enter keys to toggle section visibility Flexible Waiter Grand Recruitment Day - Restaurants The Chancery Rosewood is redefining luxury in Mayfair, housed in the form…
Shop Supervisor Harrow
Wenzel’s the Bakers Shop Supervisor role: To find out about Wenzel's please follow the link, You can also find us on Instagram , Facebook and Twitter . ABOUT US Wenzel’s was esta…
Finance Assistant - Secondary School - Ilford
Finance Assistant required January 2026 Mixed secondary school based in Ilford Finance Assistant to support the day-to-day financial operations of a well-structured finance team Our Client is…
EYFS SEN Teaching Assistant | Caring Primary School in...
ASAP Start | Full-Time Contract | £90–£110 per day Are you a compassionate individual who cares deeply about children’s early development? This warm Hammersmith & Fulham school is looking for an E…
PM (Backshift) Handler
- We have an exciting opportunity for you to join our Operations team as a package handler. Days/shifts per week: Monday to Friday - 16:00 to 20:00 Hours per week: 20 hours Salary: £272.…
Commercial Finance Business Partner (Hiring Immediately)
The Role: A strategic Finance professional who serves as the point of contact for Partners and senior stakeholders, providing expertise in commercial finance, profitability initiatives, and comprehe…
Member of Technical Staff (Post Training)
Member of Technical Staff, Post-Training — Inherent (London) At Inherent, we are on a mission to build AI that recursively self-improves to discover new knowledge. Scientific advances are the backb…