Cybersecurity Lead / SME – IT & OT Security

About the role

The Cybersecurity Lead/SME will protect Meralco PowerGen Corporation, its subsidiaries, and power generation plants from cyber threats. This role focuses on safeguarding both corporate IT and operational technology (OT) environments, ensuring confidentiality, integrity, and availability while supporting compliance with Philippine power sector regulations.

Key responsibilities

• Monitor and analyze security events across IT and OT, including SCADA and ICS systems.
• Assist in incident response, from investigation to containment and documentation.
• Support vulnerability scanning, patch management, and remediation tracking.
• Operate and maintain firewalls, IDS/IPS, SIEM, EDR, and OT‑specific security tools.
• Provide secure configuration input for new projects, including renewable energy facilities.
• Support periodic penetration testing and risk assessments.
• Help maintain compliance with ERC, DOE, data privacy laws, ISO 27001, and NIST standards.
• Prepare regular cybersecurity status reports for internal stakeholders.
• Promote cybersecurity awareness through campaigns and training.
• Collaborate with IT, OT, plant operations, vendors, and service providers.

Required profile

• Bachelor’s degree in Information Security, Computer Science, IT or related field.
• 3–5 years of IT or cybersecurity experience; exposure to energy/utilities or OT security is a plus.
• Strong problem‑solving, analytical, communication, and teamwork skills.
• Ability to work under pressure and manage multiple priorities.

Required skills

• Network and application security fundamentals.
• Experience with SIEM, EDR, IAM, firewalls, IDS/IPS.
• Vulnerability scanning, patch management, penetration testing, risk assessment.
• Knowledge of SCADA, ICS, and OT‑specific security tools.
• Familiarity with security frameworks such as NIST and ISO 27001.