About this role
<p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><strong><span style="">Be #InGoodHands with Metrobank</span></strong></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development. With Metrobank, a meaningful life is within your reach!</span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"> </p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><strong><span style="">Position Title: </span></strong><strong><span style="">DEVSECOPS LEAD</span></strong></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"> </p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><strong><span style="">Job Summary:</span></strong></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">The DevSecOps Lead leads the strategy, execution, and cultural shift required to embed modern DevSecOps practices across the enterprise. This role will lead the enablement of secure, stable and automated software delivery practices across the core IT organization, while actively collaborating with Information Security, Core Banking, Digital Banking and other key IT enablers of the bank who operate outside of Information Technology Group (ITG). </span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><strong><span style="">Duties and Responsibilities: </span></strong></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span> <span style="">Lead the DevSecOps roadmap and promote agile, secure, and automated delivery across the enterprise </span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span><span style=""> Drive collaboration and change across software development, infrastructure and information security to support IT modernization </span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span><span style=""> Modernize the software delivery pipeline using Continuous Improvement/Continuous Deployment (CI/CD), Infrastructure as Code (IaC), and automated quality/security gates. </span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span><span style=""> Redesign release management and environment provisioning processes to reduce bottlenecks and manual handoffs.</span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span><span style=""> Advance “shift-left” security by embedding security controls early into the software development lifecycle, including static and dynamic code analysis, open-source risk management, and vulnerability detection into early stages of development.</span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span><span style=""> Lead the definition of IT environment strategy and lifecycle management covering non-production, production and disaster recovery systems. </span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span><span style=""> Set-up and monitor governance metrics to track adoption of secure development practices and ensure alignment with enterprise risk and compliance goals. </span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span><span style=""> Mentor teams on reliability engineering, automated testing, code quality, and incident management</span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span> <span style="">Drive continuous improvement of the DevSecOps practice by staying current with emerging technologies, evolving security regulations, industry best practices and ensuring these are integrated into delivery pipelines and team capabilities</span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><span style="">·</span><span style=""> Support IT initiatives that affect delivery pipelines by ensuring alignment to DevSecOps practices, automation standards and security requirements.</span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"> </p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><strong><span style="">Qualifications:</span></strong></p> <p style="margin:0.0in 0.0in 1.0E-4pt;line-height:15.0pt"><span style="">·</span><span style="Segoe UI', sans-serif"> </span><span style="">More than 5 years experience </span></p> <p style="margin:0.0in 0.0in 1.0E-4pt;line-height:15.0pt"><span style="">·</span><span style="Segoe UI', sans-serif"> </span><span style="">At least 2 years of Security experience (Application Security and Infrastructure Security)</span><span style="Segoe UI', sans-serif"> </span></p> <p style="margin:0.0in 0.0in 1.0E-4pt;line-height:15.0pt"><span style="">·</span><span style="Segoe UI', sans-serif"> </span><span style="">Strong experience in system environment maintenance and strategic planning </span></p> <p style="margin:0.0in 0.0in 1.0E-4pt;line-height:15.0pt"><span style="">·</span><span style="Segoe UI', sans-serif"> </span><span style="">Knowledge in Continuous Integration and Continuous Deployment (CI/CD) </span></p> <p style="margin:0.0in 0.0in 1.0E-4pt;line-height:15.0pt"><span style="">·</span><span style="Segoe UI', sans-serif"> </span><span style="">Experience with Infrastructure as Code (IaC) </span></p> <p style="margin:0.0in 0.0in 1.0E-4pt;line-height:15.0pt"><span style="">·</span><span style="Segoe UI', sans-serif"> </span><span style="">Proficient in Automated Testing </span></p> <p style="margin:0.0in 0.0in 1.0E-4pt;line-height:15.0pt"><span style="">·</span><span style="Segoe UI', sans-serif"> </span><span style="">Familiar with Shift‑Left Security practices (static and dynamic code analysis, open‑source risk management)</span></p> <p style="margin:0.0in 0.0in 1.0E-4pt;line-height:15.0pt"> </p> <p style="margin:0.0in 0.0in 1.0E-4pt;line-height:15.0pt"> </p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><strong><span style="">Other Details:</span></strong></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><strong><span style="">Rank: </span></strong><span style="">Junior Officer – Senior Officer</span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><strong><span style="">Unit: </span></strong><span style="">Information Technology Group </span></p> <p style="line-height:normal;background-color:white;margin:0.0in 0.0in 8.0pt"><strong><span style="">Office Location: </span></strong><span style="">Metrobank Center, BGC</span></p> <p style="margin:0.0in 0.0in 8.0pt;line-height:107%"> </p> <p style="margin:0.0in 0.0in 8.0pt;line-height:107%"> </p>