Security Architect

📋 Description

• Own the enterprise security GRC framework — policy hierarchy, risk register methodology, control
• Map controls to DORA, NIS2, ISO 27001, and PCI-DSS, identify gaps, and set remediation priority.
• Act as the final authority on regulatory interpretation affecting security, including written
• Own the compliance and obligation management framework across all five regulated jurisdictions
• Represent the company in regulatory discussions alongside the CISO and General Counsel where
• Define the company's human-risk philosophy and shape the security awareness architecture —

🎯 Requirements

• 8+ years in security with a significant focus on GRC, regulatory compliance, riskmanagement, or a
• Proven experience designing enterprise-level security architectures or frameworks;experience in a
• Deep command of ISO 27001 and PCI-DSS (working knowledge of DORA and NIS2preferred), with the
• Multi-jurisdiction compliance experience; direct exposure to FCA or CySEC is a strongadvantage.
• Demonstrated ability to advise and influence C-suite stakeholders on complex security andregulatory
• A structured, analytical thinking style — able to hold multiple regulatory regimessimultaneously

🎁 Benefits

• Competitive Salary
• Work-Life Harmony (#LI-Hybrid)
• Generous Time Off
• Employee Referral Program
• Comprehensive Health & Pension Benefits
• Workation Wonderland: 30 extra days to work remotely from anywhere in the world