AWS Platform Security Architect

Employment type: Permanent

Location: Makati City, Metro Manila

Work setup: Hybrid (open to 2x a week in the office)

Work schedule: 2pm to 10pm Manila time

Pay range: Php 122,000 to Php 166,000

Discover a world of endless possibilities with Cambridge University Press & Assessment, a distinguished global academic publisher and assessment organization proudly affiliated with the prestigious University of Cambridge.

We are looking for a Platform Security Lead/ Security Architect to join our English Technology Team. As a key member of our team, your goal will be to take the overall accountability for the Cloud Hosting and Security Strategies across the ELT Platforms, working with the key business stakeholders, Platform Lifecycle Managers, Solutions Architects, Central Technology, Support and our Vendors to analyze, agree and implement the appropriate cloud base hosting solutions and security measures.

Why Cambridge?

At Cambridge, our unwavering commitment is to excel in education, learning, and research on a global scale. With a presence in over 170 countries, we empower millions of individuals, unlocking their potential and enabling their success. From dedicated teachers shaping young minds to visionary researchers pushing the boundaries of knowledge, we embody a relentless pursuit of enlightenment, curiosity, and understanding.

We embrace change as an opportunity for growth and progress, constantly adapting to meet the evolving needs of our customers. Collaboration and attentive listening are at the heart of our journey, as we work hand in hand with our customers and each other to innovate and discover more effective ways to achieve our goals. We believe people thrive in an environment where Trust and Empowerment are at the forefront, which is why all our new team members are provided regularization on their first day so they can start #PursuingPotential from day one.

Joining Cambridge means becoming a part of an extraordinary institution renowned worldwide. Beyond that, you'll become a part of a vibrant and forward-thinking community that transcends tradition, fostering a culture of continuous growth and personal development. Here, we provide the right environment for you to thrive, supporting your professional journey and empowering you to reach your highest potential, that is why our pay philosophy is intricately tied to your skills and competencies, ensuring that your compensation aligns with the unique value you bring to the role you are applying for.

What can you get from Cambridge?

In this role, you'll have the opportunity to collaborate with colleagues from diverse branches, expanding your horizons and enriching your understanding of different cultures. We value your wellbeing and offer stability, fostering your professional and personal growth through internal and external activities and training sessions to help enrich your skillset.

Enjoy work-life balance flexibility through our range of options, including flexible schedules, hybrid work arrangements, and generous paid leave. As a regular employee on Day One, you'll have access to comprehensive healthcare benefits, ensuring your peace of mind with coverage for dependents, group life insurance, and robust well-being programs.

What will you do as the English Platform Security Lead/ Security Architect?

• Lead and mentor a small team of security engineers, providing technical guidance, managing priorities, and ensuring the execution of security initiatives aligned with platform operations.
• Own the ELT Technology risk register and conduct risk assessments and develop mitigation strategies based on platform-specific risks and vulnerabilities. Leveraging frameworks such as NIST, ISO, and CIS to develop risk management programs in collaboration with Core Services.
• Own and implement a robust Security Architecture Design to ensure a zero-trust approach across all APIs, integrating security into all aspects of platform design, deployment, and operations.
• Working with Core Security, lead efforts in designing, testing, and refining security incident response plans and protocols. Manage and support ongoing threat intelligence programs and ensure timely remediation of identified security threats including completing comprehensive impact assessments of security related changes to platforms.

What makes you the ideal candidate for this role?

Experience in Platform Security, with the following:

• CISSP Certification with strong knowledge of key domains:
  • Security & Risk Management
  • Identity & Access Management
  • Platform Security Architecture & Platform Operations (hands-on AWS security design and implementation)
• Leadership: Proven ability to lead, mentor, and manage security teams and projects
• Risk & Vulnerability Management: Skilled in threat modeling, vulnerability assessments, and penetration testing
• Security Frameworks: Familiar with NIST, ISO/IEC 27001, CIS Controls, SOC 2

Technical Skills

• IAM, SSO, MFA
• Network security (firewalls, VPNs, IDS/IPS)
• Cloud security (AWS, Azure, GCP)
• Application security practices

Soft Skills

• Strong communication and problem-solving

Education

• Bachelor's in Computer Science, Information Security, or related field
• Advanced certifications (AWS Security, CISM) are a plus

Preferred Qualifications

• • Experience in DevOps and CI/CD environments
  • Familiarity with Infrastructure-as-Code security practices for platform deployments (e.g., Terraform, CloudFormation)
  • Exposure to automated security tooling and incident response

If you are driven by and have a passion for technology security and desire to be part of a globally renowned institution that celebrates innovation, embraces inclusion, and empowers learners, we invite you to pursue your potential with us.

Deadline of application submission is on October 9, 2025, but may close early if we receive sufficient applications. Therefore, if you are interested, please submit your application as early as possible. Whilst not essential, it is very advantageous if you submit a Cover Letter alongside your CV.

Please review the attached job description for further details on the role.

---