Security Architect

Do you want to take the first step in making Filipinos’ lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba? Join the G Nation today!

If you have a strong background in IT, computer science, or software engineering, and are analytical, technologically savvy, solutions and process-focused, then the Technology & Operations team may be for you!

• Lead end-to-end security architecture for platforms, applications, data, and infrastructure in multi-cloud/hybrid environments.
• Produce HLD/LLD, reusable reference architectures, and design patterns for critical controls (segmentation/zero trust, identity, data protection/crypto, runtime protection, observability, recovery).
• Embed secure-by-design/default principles through threat modeling, attack-surface reduction, least privilege, and service-to-service trust.
• Ensure proposed architectures align with security goals, objectives, and enterprise architecture principles, prioritizing cost-effectiveness and scalability.
• Collaborate with internal stakeholders (Business Units, Engineering) to seamlessly integrate security into enterprise-wide architecture planning.
• Champion best practices and stay abreast of industry trends in cybersecurity and fraud prevention technologies.
• Provide expert technical guidance to project managers and stakeholders on security controls, countermeasures, and risk management approaches
• Lead the technical solutioning team in collaborative research, vendor assessment, and technology stack evaluation, fostering an agile and efficient environment.

• 7+ years in security architecture/engineering with shipped, large-scale systems (finserv/fintech a plus).
• Depth in at least two of: cloud/platform security, identity & access, data protection/crypto, network segmentation/zero trust, platform/endpoint security; working knowledge across adjacent domains.
• Hands-on familiarity with Kubernetes/containers, service mesh, API gateways, IaC (e.g., Terraform), secrets management, and modern telemetry.
• Strong threat modeling, architectural documentation, stakeholder communication, and decision-recording skills.
• Familiarity with BSP regulations and global frameworks (ISO 27001, NIST 800-53/CSF, PCI DSS, CIS Benchmarks, MITRE ATT&CK).