About the role
Do you want to take the first step in making Filipinos’ lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba? Join the G Nation today! Who you’ll be working with: If you have a strong background in IT, computer science, or software engineering, and are analytical, technologically savvy, solutions and process-focused, then the Technology & Operations team may be for you! You’ll be responsible for the following: Lead end-to-end security architecture for platforms, applications, data, and infrastructure in multi-cloud/hybrid environments. Produce HLD/LLD, reusable reference architectures, and design patterns for critical controls (segmentation/zero trust, identity, data protection/crypto, runtime protection, observability, recovery). Embed secure-by-design/default principles through threat modeling, attack-surface reduction, least privilege, and service-to-service trust. Ensure proposed architectures align with security goals, objectives, and enterprise architecture principles, prioritizing cost-effectiveness and scalability. Collaborate with internal stakeholders (Business Units, Engineering) to seamlessly integrate security into enterprise-wide architecture planning. Champion best practices and stay abreast of industry trends in cybersecurity and fraud prevention technologies. Provide expert technical guidance to project managers and stakeholders on security controls, countermeasures, and risk management approaches Lead the technical solutioning team in collaborative research, vendor assessment, and technology stack evaluation, fostering an agile and efficient environment. We're looking for: 7+ years in security architecture/engineering with shipped, large-scale systems (finserv/fintech a plus). Depth in at least two of: cloud/platform security, identity & access, data protection/crypto, network segmentation/zero trust, platform/endpoint security; working knowledge across adjacent domains. Hands-on familiarity with Kubernetes/containers, service mesh, API gateways, IaC (e.g., Terraform), secrets management, and modern telemetry. Strong threat modeling, architectural documentation, stakeholder communication, and decision-recording skills. Familiarity with BSP regulations and global frameworks (ISO 27001, NIST 800-53/CSF, PCI DSS, CIS Benchmarks, MITRE ATT&CK). What We Offer Opportunity for career growth and development in the #1 FinTech company in the country Working with a dynamic and highly collaborative team who want to change the game A company that values their people with highly competitive and flexible
