Security Architect

Metrobank; Metro Manila; On-site; PHP 1,500,000 - 2,100,000; Full time

Job summary

Metrobank is seeking an experienced Security Architect to design, implement, and continuously enhance the bank's security architecture across on-premises and cloud environments.

The role focuses on evaluating security solutions, establishing baselines, identifying risks, and collaborating with multiple IT teams to strengthen cybersecurity and resilience. A senior candidate with extensive IT security and architecture experience is required.

Qualifications

• Bachelor's degree in CS or Information Security.
• 8+ years in IT security, security architecture, infrastructure security, and risk assessment.
• Strong knowledge of network, server, database, application, cloud, and data security; vulnerability assessment and pentesting.
• Security certifications (e.g., CISSP, CEH, GIAC, GSEC) preferred.
• Experience with identity and access management including MFA and SSO is an advantage.

Responsibilities

• Design, implement, and maintain the Bank's security architecture across on-premises and cloud environments.
• Evaluate, test, and deploy security solutions aligned with best practices and business requirements.
• Develop and maintain security baseline standards for OS, networks, databases, security devices, and other technologies.
• Identify security risks and design gaps, recommending enhancements.
• Collaborate with enterprise architects, infrastructure teams, data scientists, and IT groups to strengthen cybersecurity and resilience.
• Serve as SME for enterprise-wide IT and security projects, providing security guidance.
• Lead development and implementation of secure, resilient network and security architectures.
• Conduct security assessments, vulnerability reviews, and impact analyses for technology changes.
• Ensure disaster recovery requirements, security controls, and compliance standards are established, tested, and maintained.
• Prepare business cases and cost-benefit analyses for security initiatives.
• Review and approve security configurations and deployments (firewalls, VPNs, IDS/IPS, servers, network devices).
• Maintain accurate security documentation, standards, and records.
• Support continuous improvement of governance, risk management, and compliance programs.

Skills

Analytical thinking

Leadership

Communication

Project management

Cybersecurity knowledge

Risk mitigation

Education

Bachelor's degree in Computer Science or Information Security

Job description

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development.

With Metrobank, a meaningful life is within your reach!

Security Architect

Designs, implements, and continuously enhances the Bank's security architecture, infrastructure, and related services. Leads the evaluation, testing, and deployment of security solutions, ensuring network and system security controls align with industry best practices, business requirements, and the Bank's cybersecurity strategy. Serves as a key advisor in security-related projects, technologies, and risk mitigation initiatives across on-premises and cloud environments.

Key Responsibilities

• Design, implement, and maintain the Bank's security architecture, infrastructure, and related services across on-premises and cloud environments.
• Evaluate, test, and deploy security solutions, ensuring alignment with industry best practices and business requirements.
• Develop and maintain security baseline standards for operating systems, networks, databases, security devices, and other technologies.
• Identify security risks and design gaps in existing and proposed architectures, and recommend appropriate enhancements.
• Collaborate with enterprise architects, infrastructure teams, data scientists, and IT groups to strengthen the Bank's cybersecurity and resilience posture.
• Serve as the subject matter expert (SME) for enterprise-wide IT and security projects, providing security guidance and design recommendations.
• Lead the development and implementation of secure, resilient, and scalable network and security architectures aligned with business and technology strategies.
• Conduct security assessments, technical control testing, vulnerability reviews, and impact analyses for technology changes and initiatives.
• Ensure disaster recovery requirements, security controls, and compliance standards are established, implemented, tested, and maintained.
• Prepare business cases, perform cost-benefit analyses, and oversee the implementation of security infrastructure initiatives.
• Review and approve security-related configurations and deployments, including firewalls, VPNs, IDS/IPS, servers, and network devices.
• Maintain accurate security documentation, standards, and technical records for all security implementations.
• Support the continuous improvement of the Bank's information security governance, risk management, and compliance programs.

Qualifications:

• Bachelor's degree in computer science, Information Security, or a related field.
• At least 8 years of experience in IT Security, Security Architecture, Infrastructure Security, and Security Risk Assessment.
• Strong knowledge of network, server, database, application, cloud, and data security, as well as vulnerability assessment and penetration testing.
• Good understanding of security protocols, cryptography, authentication, and authorization technologies.
• Relevant security certifications (e.g., CISSP, CEH, GIAC, GSEC) are preferred.
• Experience with identity and access management solutions, including MFA and SSO, is an advantage.
• Strong analytical and problem-solving skills with a proactive cybersecurity mindset.
• Effective leadership, collaboration, and stakeholder management skills.
• Strong project management and communication skills.