Head Of Security And Risk

Lewis Personnel Management; Metro Manila; On-site; PHP 2,000,000 - 4,200,000; Full time

Job summary

Lewis Personnel Management seeks an experienced Head of Security Architecture & Innovations to steer strategic design, implementation, and continuous evolution of our information security architecture across core IT systems, applications, and cloud/hybrid infrastructure.

You will define security architecture aligned with business goals and regulatory frameworks, lead a team of security officers, and drive risk-based decisions through collaboration with IT and development teams.

Qualifications

• Minimum 5+ years of IT security and security architecture experience.
• Deep knowledge of network/server/database/app/cloud security architectures.
• Professional certifications such as CISSP, CEH, GIAC, or equivalent are desirable.

Responsibilities

• Architect, implement, and maintain scalable security systems and baselines.
• Research and evaluate cutting-edge security architectures and cloud tools.
• Formulate and enforce enterprise IT security policies and standards.
• Identify design gaps, manage vulnerability assessments, and oversee security testing.
• Serve as SME on security architecture to IT and development teams.
• Direct, mentor, and manage security officers and staff.

Skills

IT security architecture

Cloud security

Threat modelling

Education

CISSP / CEH / GIAC / GSEC or equivalent certifications

Job description

About the role

We are seeking an experienced Head of Security Architecture & Innovations to lead the strategic design, implementation, and continuous evolution of our information security architecture. In this role, you will define the overall security architecture needed to safeguard core IT systems, applications, and cloud/hybrid infrastructure against emerging threats while ensuring alignment with overarching business goals and regulatory frameworks.

Key responsibilities

• Architect, implement, and maintain scalable security systems, secure infrastructure designs, and technical baselines based on information security roadmaps, risk assessments, and industry best practices
• Research and evaluate cutting-edge IT security architectures, cloud security tools, and technologies to mitigate emerging threats and drive continuous innovation across internal systems and third-party integrations
• Formulate, maintain, and enforce enterprise IT security policies, technical standards, and standard operating procedures for information processing environments, facilities, and vendor integrations
• Identify security design gaps in existing and proposed architectures, manage vulnerability assessments, and oversee security testing (including static/dynamic code analysis, penetration testing, and DR testing)
• Serve as the subject matter expert on security architecture to internal IT and development teams, evaluating business cases for security initiatives to balance operational performance with robust security controls
• Direct, mentor, and manage security officers and staff, ensuring effective allocation of resources, performance monitoring, and team development

About you

• Minimum 5+ years of dedicated experience in IT security, security architecture design, and IT security risk assessments within enterprise or financial environments
• Deep knowledge of network, server, database, application, and cloud security architecture (AWS, Azure, or GCP), including cryptography, authentication protocols (MFA, SSO, IAM), and dynamic/static code analysis
• Strong understanding of cloud security risks (APTs, data breaches, account hijacking, DoS) and the ability to proactively evaluate threat vectors to protect organizational assets
• Professional certifications such as CISSP, CEH, GIAC, GSEC, or equivalent are highly desirable
• Excellent leadership, project management, and conflict-resolution skills, with the ability to communicate complex security concepts clearly to technical and non-technical stakeholders alike