Head of Security Architecture and Engineering (Banking / Financial Services)

Risewave Consulting, Inc.; Taguig; On-site; PHP 2,600,000 - 3,800,000; Full time

Job summary

Risewave Consulting, Inc. seeks a Security Architecture & Engineering Head to drive strategic security initiatives across the enterprise. You will lead multi-discipline teams spanning architecture, application security, platform/cloud security, and fraud product management.

This leadership role requires deep technical depth, enterprise thinking, and proven people leadership to translate business goals into robust security roadmaps and secure-by-design outcomes.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field.
• Master’s degree is an advantage for senior leadership consideration.
• At least 10 years of information security/cybersecurity experience.

Responsibilities

• Set the overall security strategy and roadmaps for architecture and engineering.
• Lead architecture reviews and ensure secure-by-design across programs.
• Drive enterprise security maturity and stakeholder collaboration at senior levels.
• Oversee application, cloud, platform, and fraud-security initiatives.
• Mentor security architects, engineers, and product teams for capability growth.
• Manage risk, governance, and compliance with relevant standards.

Skills

Security Architecture

Security Engineering

Cloud Security

DevSecOps

IAM & Access Control

Vulnerability Management

Security Testing

Threat Modeling

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Master’s degree (advantage)

Job description

Our client is seeking an experienced Security Architecture & Engineering Head to provide strategic direction and technical leadership across its enterprise security landscape.

The role will oversee multiple security disciplines, including Security Architecture, Application Security, Platform & Cloud Security, and Security & Fraud Product Management. The successful candidate will be responsible for driving security transformation initiatives, strengthening security capabilities, and ensuring security is embedded into technology and business decisions.

This is a leadership position suited for a security professional who combines strong technical depth, enterprise-level thinking, and proven people leadership.

What You’ll Be Responsible For

Security Strategy & Leadership

• Set the overall direction and roadmap for security architecture and engineering initiatives.
• Translate business objectives into practical security strategies and technology solutions.
• Work closely with senior stakeholders across Technology, Product, Risk, and other business functions.
• Provide guidance on emerging cybersecurity technologies, industry developments, and evolving security practices.
• Drive initiatives that continuously improve the organization’s overall security maturity.

Enterprise Security Architecture

• Establish and continuously improve the organization’s security architecture standards and principles.
• Ensure security is incorporated into the design of applications, systems, infrastructure, and technology platforms.
• Review and provide direction on security-related architecture and technology decisions.
• Establish appropriate security governance and ensure adherence to internal policies and standards.
• Promote a secure-by-design approach across technology initiatives.

Application & Software Security

• Lead initiatives focused on improving application security throughout the development lifecycle.
• Partner with software engineering teams to incorporate security practices into development processes.
• Oversee secure coding, security testing, vulnerability identification, and remediation activities.
• Drive the use of automated security testing and monitoring capabilities.
• Help engineering teams adopt and maintain effective application security practices.

Cloud, Infrastructure & Platform Security

• Provide leadership over security controls across infrastructure, cloud, and enterprise technology environments.
• Define appropriate security configurations, hardening standards, and protection mechanisms.
• Oversee capabilities covering areas such as Identity & Access Management, Endpoint Security, Network Security, and Cloud Security.
• Ensure technology environments are appropriately protected against evolving security threats.
• Support the adoption of secure and scalable cloud and platform architectures.

Security & Fraud Solutions

• Lead the direction and delivery of security and fraud prevention products and capabilities.
• Work with Product, Engineering, and Business teams to establish and execute relevant security product roadmaps.
• Ensure security solutions address business requirements while meeting applicable regulatory and compliance obligations.
• Identify opportunities to improve security and fraud prevention capabilities through technology and innovation.

People & Organizational Leadership

• Build, lead, and develop a high-performing organization of security architects, engineers, and product professionals.
• Establish clear objectives, performance expectations, and development plans for the team.
• Encourage collaboration, innovation, knowledge sharing, and continuous improvement.
• Manage workforce planning, resource allocation, budget requirements, and recruitment activities.
• Develop the team’s technical and leadership capabilities to support long‑term organizational needs.

Risk, Governance & Compliance

• Work alongside Risk, Legal, Compliance, and other stakeholders to ensure security practices meet relevant regulatory and industry requirements.
• Lead or support enterprise security risk assessments and remediation planning.
• Monitor key security risks and ensure appropriate mitigation strategies are implemented.
• Present security initiatives, risks, performance, and progress to senior leadership.

What We’re Looking For

Education & Professional Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• Master’s degree is an advantage.
• At least 10 years of experience in Information Security/Cybersecurity.
• Minimum 5 years of experience in a leadership or management capacity.
• Strong track record in security architecture and engineering, ideally combined with experience in security product management.
• Experience leading security initiatives across complex enterprise technology environments.

Technical Background

Strong knowledge and practical experience in several of the following areas:

• Enterprise Security Architecture
• Application Security
• Cloud Security – AWS, Azure, or GCP
• Platform & Infrastructure Security
• DevSecOps and secure CI/CD practices
• Container and workload security
• Identity & Access Management
• Endpoint and Network Security
• Vulnerability Management
• Security Testing and Assessment
• SIEM and security monitoring technologies
• SAST / DAST solutions

Familiarity with established cybersecurity frameworks and standards such as: