Security Architecture Lead (Data Protection & Microsoft Purview)

blaseek; Manila; On-site; PHP 450,000 - 850,000; Full time

Job summary

blaseek is seeking a Security Architecture Lead focused on Data Protection and Microsoft Purview. You will own the design and direction of enterprise data protection controls, not just implementation.

Define how DLP, information protection, and data governance should work across cloud, hybrid, and internal systems. You will think critically, challenge assumptions, and make decisions when there is no perfect framework.

Qualifications

• Experience with Microsoft Purview including DLP and information protection
• Background in security architecture, not just operational security
• Understanding of data flows, cloud services, and hybrid environments
• Ability to explain trade-offs and security rationale to non-security audiences

Responsibilities

• Define and own the data protection and DLP architecture across Microsoft Purview
• Design and refine risk-based DLP strategies, avoiding one-size-fits-all policies
• Identify non-obvious data exposure risks across applications, integrations, and user behavior
• Translate business and regulatory requirements into practical security architecture decisions
• Challenge existing controls and redesign them when they no longer make sense
• Partner with security, engineering, and business stakeholders to align protection with usability
• Provide architectural guidance and design reviews for new platforms and systems

Skills

Microsoft Purview (DLP)

Security architecture

Data governance

Ambiguity handling

Job description

About The Role

We are looking for a Security Architecture Lead focused on Data Protection and Microsoft Purview. This role owns the design and direction of enterprise data protection controls, not just implementation.

You will define how DLP, information protection, and data governance should work across cloud, hybrid, and internally built systems. This role requires strong judgment, the ability to challenge assumptions, and comfort making decisions when there is no perfect framework answer.

This is not a runbook-driven role. You are expected to think critically and design solutions that fit how the business and technology actually operate.

Key Responsibilities

• Define and own the data protection and DLP architecture across Microsoft Purview
• Design and refine risk-based DLP strategies, avoiding one-size-fits-all policies
• Identify non-obvious data exposure risks across applications, integrations, and user behavior
• Translate business and regulatory requirements into practical security architecture decisions
• Challenge existing controls and redesign them when they no longer make sense
• Partner with security, engineering, and business stakeholders to align protection with usability
• Provide architectural guidance and design reviews for new platforms and systems

Required Experience & Skills

• Strong experience with Microsoft Purview, including DLP and information protection
• Background in security architecture, not just operational security
• Solid understanding of data flows, cloud services, and hybrid environments
• Experience making architecture decisions in ambiguous or evolving environmentsAbility to clearly explain trade-offs and security rationale to non-security audiences

Ideal Candidate Profile

• Thinks in scenarios and risk, not only tools and policies
• Comfortable challenging long-standing assumptions
• Can operate effectively without complete information
• Pragmatic, curious, and business-aware