Security Architect II

Stefanini Group; Metro Manila; On-site; PHP 800,000 - 1,600,000; Full time

Job summary

Stefanini Group is seeking a Security Architect II in Pasay to lead fortification of security infrastructure. You will design, implement, and integrate robust controls, working with ARB to assess architecture, security posture, and long-term supportability.

Role focuses on practical deployment of identity management, cloud security, and secure development practices. The position requires deep knowledge of security frameworks, strong communication skills, and the ability to influence across IT

Qualifications

• Excellent written and verbal communication skills and ability to explain security and risk concepts to diverse audiences.
• Strong interpersonal and collaboration skills for cross‑functional work.
• Experience translating security requirements into architecture and governance.
• Knowledge of PCI, SOX, FTC, OWASP and related standards is preferred.

Responsibilities

• Develop and maintain architectural security standards and practices.
• Design secure, scalable security architectures for systems and apps.
• Identify risks and remediation in enterprise projects and propose enhancements.
• Collaborate with business and IT leaders to drive security strategy and direction.
• Provide security expertise to technology teams and projects across the organization.
• Ensure compliance with regulations and proper use of security technologies.

Skills

Security mindset

Communication skills

Collaboration

Education

Bachelor's degree

Tools

CISSP

CISM

AWS Certification

Azure Certification

Job description

Job Description

Join us to co-create solutions for a better future!

Job Details

Information Technology

Security Architect II Pasay

Posted:10/23/2026

Job Description

• Job ID#: 65245
• Job Category: Information Technology
• Position Type: Full Time
• Remaining Positions: 1

As a Security Architect and Engineer, you will lead the charge in fortifying our organization's security infrastructure. Your role encompasses designing and implementing robust security solutions tailored to our unique needs, ensuring that our systems, data, and networks remain resilient against potential threats. Collaborating closely with various stakeholders, you'll assess existing security frameworks, implement effective measures, and uphold stringent standards.

The individual will be a key member of the Architecture Review Board (ARB), helping ensure significant technology initiatives are evaluated for security, architecture, integration, operational impact, risk, and long-term supportability.

Your responsibilities extend beyond design, encompassing practical implementation and integration of security solutions into our existing infrastructure. You'll configure and deploy tools such as privileged identity management, secure cloud posture management, and secure application development technologies, AI controls, ensuring seamless integration while upholding rigorous security protocols.

Architectural Security Design

• Develop and maintain architectural security standards, guidelines, and best practices.
• Design secure, scalable, and resilient security architectures for various systems and applications.
• Identify, quantify, and provide design remediations for security risks as they relate to enterprise projects.
• Evaluate existing systems and propose enhancements to improve security posture.
• Partner with business members and IT leaders to drive security strategy and direction
• Produce management reporting, including appropriate metrics that inform senior leadership as to the state of information security risk and exposure
• Understands security product / service cost drivers and industry and business trends impacting the client information security program
• Provide information security matter expertise to technology teamsand projects
• Ensure that the organization is leveraging the proper technologies to meet security related policies (including FTC, PCI)
• Ensure compliance with local regulations e.g. local encryption regulations and privacy law

Architecture Review Board

• Serve as a key technical member of the Architecture Review Board (ARB).
• Review significant technology initiatives and proposed architectural changes.
• Identify security concerns, dependencies, architectural impacts, operational considerations, and technical risks before implementation.
• Help teams evaluate alternative approaches and document architecture decisions.
• Improve the quality and consistency of technical information presented to the ARB.
• Help determine which initiatives require deeper security and architecture review. This aligns with prior internal discussion that Security should help evaluate projects against agreed standards and determine which should proceed through architecture review.

Security Solution Implementation

• Implement security solutions based on industry standards and organizational requirements.
• Configure and deploy security tools, such as cloud security governance and monitoring, firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms.
• Collaborate with cross-functional teams to integrate security measures into new and existing systems.
• Recognizes and identifies potential areas where existing technical security polices standards and procedures require change, or where new ones need to be developed, especially regarding future business expansion
• Evaluate and recommend security software/hardware and its integration into existing architecture (Proof of Technology)

Job Requirements Details

• College degree in related technical / business areas and/or 10+ years equivalent work experience
• 3+ years experience as a security architect or consultant with enterprise experience.
• Excellent written and verbal communication skills, interpersonal and collaboration skills, and the ability to communicate security and risk-related concepts to technical and non-technical audiences.
• In depth knowledge of information security practices related to PCI, SOX, FTC, and OWASP application security.
• Exhibit excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives.
• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), AWS or Azure Certifications as related to security and architecture, Certified Information Systems Auditor (CISA) or other similar credentials, is preferred.
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT and ones from NIST and CIS are preferred.

Technical Knowledge Areas

• Security Architecture Design : Ability to design secure, scalable, and resilient security architectures for various systems and applications including AI.
• Security Technologies : Proficiency in security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, endpoint protection, encryption mechanisms, etc.
• Network Security : Understanding of network security principles, protocols, and technologies (e.g., VPN, SSL/TLS, IPsec, DNSSEC, SASE) inclusive of Zero Trust architecture
• Cloud Security : Knowledge of cloud security principles and experience with securing cloud environments (e.g., AWS, Azure, GCP), including identity and access management (IAM), data encryption, and secure configuration.
• Application Security : Familiarity with secure coding practices, web application firewalls (WAF), secure development life cycle (SDLC) and vulnerability assessment tools.
• Operating Systems : Proficiency in securing various operating systems, including Windows, Linux and Unix.
• Encryption : Understanding of cryptographic principles and protocols, such as symmetric/asymmetric encryption, digital signatures, SSL/TLS, and PKI.
• Compliance : Knowledge of regulatory requirements and industry standards (e.g., GDPR, HIPAA, PCI DSS) and experience in ensuring compliance with security regulations.
• Data Governance : Data Loss Prevention, File Integrity Monitoring, SEIM, Data scanning and tagging, Microsoft AIP

Physical Demands

The physical demands described here are representative of those that must be met by an employee to perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is occasionally required to stand, walk, and sit.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment is usually moderate.

Pay Range

Based on Experience