Security Architecture Lead (Data Protection & Microsoft Purview)

Hammerjack Pty Ltd; Philippines; On-site; PHP 2,400,000 - 4,200,000; Full time

Job summary

Hammerjack Pty Ltd is seeking a Security Architecture Lead focused on Data Protection and Microsoft Purview to shape the enterprise architecture for DLP, information protection and governance. You will define controls and ensure they fit cloud, hybrid, and in-house systems, balancing risk with business usability.

The role requires strong judgment, experience in security architecture, and comfort making decisions in evolving environments without a fixed framework.

Qualifications

• Experience with Microsoft Purview, including DLP and information protection.
• Background in security architecture, not only operations.
• Solid understanding of data flows in cloud, hybrid, and on-prem environments.
• Experience making architecture decisions in ambiguous environments.
• Ability to explain trade-offs and security rationale to non-security audiences.

Responsibilities

• Define and own the data protection and DLP architecture across Microsoft Purview.
• Design and refine risk-based DLP strategies, avoiding one-size-fits-all policies.
• Identify non-obvious data exposure risks across applications, integrations, and user behavior.
• Translate business and regulatory requirements into practical security architecture decisions.
• Challenge existing controls and redesign them when they no longer make sense.
• Partner with security, engineering, and business stakeholders to align protection with usability.
• Provide architectural guidance and design reviews for new platforms and systems.

Skills

Purview expertise

Security architecture

Data flows / cloud & hybrid

Ambiguity handling

Communication of security trade-offs

Job description

About The Role

We are looking for a Security Architecture Lead focused on Data Protection and Microsoft Purview. This role owns the design and direction of enterprise data protection controls, not just implementation. You will define how DLP, information protection, and data governance should work across cloud, hybrid, and internally built systems. This role requires strong judgment, the ability to challenge assumptions, and comfort making decisions when there is no perfect framework answer. This is not a runbook-driven role. You are expected to think critically and design solutions that fit how the business and technology actually operate.

Key Responsibilities

• Define and own the data protection and DLP architecture across Microsoft Purview
• Design and refine risk-based DLP strategies, avoiding one-size-fits-all policies
• Identify non-obvious data exposure risks across applications, integrations, and user behavior
• Translate business and regulatory requirements into practical security architecture decisions
• Challenge existing controls and redesign them when they no longer make sense
• Partner with security, engineering, and business stakeholders to align protection with usability
• Provide architectural guidance and design reviews for new platforms and systems

Required Experience & Skills

• Strong experience with Microsoft Purview, including DLP and information protection
• Background in security architecture, not just operational security
• Solid understanding of data flows, cloud services, and hybrid environments
• Experience making architecture decisions in ambiguous or evolving environments
• Ability to clearly explain trade-offs and security rationale to non-security audiences

Ideal Candidate Profile

• Thinks in scenarios and risk, not only tools and policies
• Comfortable challenging long-standing assumptions
• Can operate effectively without complete information
• Pragmatic, curious, and business-aware