Information Technology – Security Architect

The Security Architect is primarily responsible for defining relevant enterprise-level application, infrastructure, network and architecture security standards and security design patterns of the bank in line with emerging and evolving cybersecurity threats and trends. The Security Architect also ensures compliance of concerned units within the bank on established security standards, guardrails and patterns.

ROLES AND RESPONSIBILITIES:

• Develop security architecture blueprints of strategic and non-strategic projects in support of the business requirements and based on enterprise-level security standards and solution patterns
• Perform security assessment and threat modeling of business applications in compliance with application security requirements, policies and standards
• Perform security architecture reviews and assessment of emerging technologies and capabilities, and evaluate relevant security software products to improve the bank’s security posture
• Provide guidance to Security Operations Team where necessary to analyze and mitigate advanced threats and incidents
• Provide guidance in performing root-cause analysis where appropriate and recommend technical and process controls to prevent recurrence.

COMPETENCIES:

Technical Skills:

• Knowledgeable on industry-standard security services and platforms which include but not limited to NGAV, EDR, SIEM, PAM, EIAM, Firewall, WAF, SWG, SEG, CNAPP, VAPT and Red/Purple Teaming
• Knowledgeable on defense-in-depth strategy and principle
• Knowledgeable on Secure SDLC concepts and processes
• Knowledgeable on Cloud security hardening controls and configuration best practices (AWS, Azure, GCP)
• Experience performing risk assessment and threat modeling, and knowledgeable on various security attack patterns, techniques and tactics
• Communication Skills: Excellent communication and interpersonal skills, with the ability to effectively communicate complex concepts to diverse audiences and build consensus
• Analytical Skills: Solid problem-solving capabilities, strong analytical skills, and demonstrates flexibility in handling complex situations as needed
• Ability to work independently and collaborate with teams in completing tasks and initiatives

QUALIFICATIONS:

• Graduate of Computer Engineering, Computer Science, Electronic and Communication Engineering or similar.
• Minimum 7 years of relevant IT experience - with specialization on CyberSecurity Architecture and/or Cyber Security Operations
• CISSP and/or CISM is a plus, but not mandatory

The candidate must be willing to work onsite and be assigned in either Makati/ Ortigas.