Security Architect

Bank of the Philippine Islands (BPI); Manila; On-site; PHP 900,000 - 1,600,000; Full time

Job summary

The Bank of the Philippine Islands (BPI) is seeking a Security Architect to design, implement, and govern the Bank’s security architecture across its infrastructure and applications. You will lead security projects, ensure regulatory compliance, and provide technical leadership in cybersecurity initiatives.

You will evaluate solutions, manage risks, and coordinate with teams to deliver secure designs and controls, with a focus on governance and incident response.

Qualifications

• Bachelor’s degree in information technology, computer science, engineering, or a related field.
• At least 5 years in IT, with at least 2 years in information security or cybersecurity architecture.
• Experience leading technical teams and security projects or implementing enterprise security technologies and controls.
• Strong knowledge of cybersecurity architecture, network security, IT security compliance, ITIL, IT Service Management, and secure solution delivery lifecycles.
• Security certifications such as CISSP, CISM, CISA, or equivalent are preferred.

Responsibilities

• Develop, maintain, and enforce security architecture standards, guidelines, and controls across infrastructure, applications, and technology platforms
• Evaluate technology solutions and projects to identify security risks, assess vulnerabilities, and recommend appropriate security controls and countermeasures
• Support cybersecurity operations by participating in threat monitoring, incident response, investigations, and remediation activities to address security threats and vulnerabilities
• Lead and coordinate security projects across multiple security domains, ensuring alignment with business requirements, security objectives, and regulatory standards
• Manage security compliance, vendor relationships, architectural reviews, and security assessments to strengthen the Bank’s security posture and governance framework

Skills

Leadership

Threat monitoring

Incident response

Stakeholder management

Security architecture

Regulatory compliance

Project management

Education

Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field

Security certifications such as CISSP, CISM, CISA, or equivalent

Tools

ITIL/ITSM

Job description

Job Description:

SECURITY ARCHITECT

Job Summary

The Security Architect is responsible for designing, implementing, and governing the Bank’s security architecture to protect infrastructure, systems, and information assets from internal and external threats. The role ensures compliance with security standards and regulatory requirements while providing technical leadership in cybersecurity initiatives, risk management, and secure technology design.

Responsibilities

• Develop, maintain, and enforce security architecture standards, guidelines, and controls across infrastructure, applications, and technology platforms
• Evaluate technology solutions and projects to identify security risks, assess vulnerabilities, and recommend appropriate security controls and countermeasures
• Support cybersecurity operations by participating in threat monitoring, incident response, investigations, and remediation activities to address security threats and vulnerabilities
• Lead and coordinate security projects across multiple security domains, ensuring alignment with business requirements, security objectives, and regulatory standards
• Manage security compliance, vendor relationships, architectural reviews, and security assessments to strengthen the Bank’s security posture and governance framework

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field; advanced studies are an advantage
• At least 5 years of experience in the IT industry, including at least 2 years in information security, cybersecurity architecture, or related security roles
• Experience leading technical teams, managing security projects, or implementing enterprise security technologies and controls
• Strong knowledge of cybersecurity architecture, network security, IT security compliance, ITIL, IT Service Management, and secure solution delivery lifecycles
• Security certifications such as CISSP, CISM, CISA, or equivalent are preferred, with strong analytical, communication, and stakeholder management skills