Security Architect

Metropolitan Bank & Trust Company; Metro Manila; On-site; PHP 1,400,000 - 2,400,000; Full time

Job summary

Metropolitan Bank & Trust Company is seeking an experienced IT Security Architect to design and engineer security infrastructure for both cloud and on-premise environments. You will lead the development of robust network designs and security architectures, align them with business strategy, and drive security projects across the enterprise.

The role requires extensive experience in IT security, risk assessment, and the ability to collaborate with architects, engineers, and data scientists to

Qualifications

• Graduate-level security experience with infrastructure and cloud environments.
• Experience in risk assessment, incident response, and security governance.
• Knowledge of security protocols, cryptography, authentication and authorization.

Responsibilities

• Design and engineer network and systems security infrastructure and services.
• Keep security technologies current and implement improvements.
• Collaborate with architects, engineers, and data scientists to improve cyber resilience.
• Serve as SME for enterprise IT and security projects.
• Identify design gaps and recommend architectural changes.
• Analyze cloud and on-premise security, strengthen security methods.
• Develop and maintain security baseline standards for OS, devices, and databases.
• Monitor baseline deployment in production and ensure compliance.
• Lead security architecture aligned with business and tech strategy.
• Architect and document security designs based on risk assessments and best practices.

Skills

Cloud Security

Network Security

Vulnerability Assessment

Penetration Testing

Security Architecture

IT Security Risk Assessment

Education

Bachelor's degree in Computer Science or Information Security

Job description

About the role

Responsible for the design and engineering of network and systems security infrastructure and connected services in the bank, including network and system security testing and implementation of new products, services or improvements to existing and current security infrastructure. Ensures that network and system security best practices are executed and implemented.

Key responsibilities

• Keep the security infrastructure current, make recommendations, and participate in the implementation and continuous improvement of security technologies and services in assigned information security domain

• Collaborate cross-functionally with enterprise architects, infrastructure engineers, and data scientists to achieve continuous improvement in the Bank's cyber defense and resilience posture

• Serve as subject matter expert (SME) for different enterprise-wide IT and security projects

• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements

• Investigate and analyze existing cloud structures and create new and enhanced security methods that will enhance the security of on premise and cloud-based environments

• Develop and maintain security baseline standards of various operating systems, network devices, databases, security devices and other technologies currently in use in the production environment

• Monitor and ensure ITG implements the baseline system security standards in production systems

• Analyze, design, and develop business cases for security infrastructure-related solutions and plan and direct the implementation of these solutions

• Lead the development of a robust, secure and resilient network design and security architecture that aligns the enterprise security strategy with overall business and technology strategy

• Architect, document designs and implement security solutions based on the Information Security roadmap and plan, results of security risk assessments, IT security best practices, and collaborative business analysis

About you

• Graduate of any college degree in Computer Science or Information Security, or related technical field of expertise

• At least 8 years' experience in building/implementing IT Systems Architecture/Infrastructure Security, authentication technologies, Server Security, Network Security, Database Security, Application Security, Communications Security, Data Security, IT Security Risk Assessment, Vulnerability Assessment, Penetration Testing, Business Continuity, Physical Security, Operations Security and Cloud Secure architecture

• At least 8 years' experience in IT security and IT security risk assessment

• Understanding of security protocols, cryptography, authentication and authorization

• Ability to lead and work well with the team, internal, and external clients

• Good teamwork and collaboration skills with the ability to lead security initiatives, explain and enforce security measures

• Good project management skills to lead and manage accomplishments of assigned tasks and risk assessment activities

• Self-managed, self-starter with good organizational skills

• Preferably with IT security related certification such as CISSP, CEH (or equivalent) GIAC, GSEC, etc.

• Experience implementing multi-factor authentication, single sign-on, identity management or related technologies a plus