Security Architect (Azure / AI / GDPR)

Location: Remote in Poland, Czechia, Bulgaria, Croatia, Romania, or France; Central and Eastern Europe; EU authorization required.

Company

Gramian Consultancy is a boutique consultancy providing IT professional services and engineering talent solutions.

What you will do

• Review end-to-end security architecture covering identity, access, secrets, networking, data handling, and logging.
• Lead formal security architecture approval and new-technology review processes.
• Assess AI/LLM usage, web search, new technology components, and model-related risks.
• Coordinate penetration testing, vulnerability remediation, and secure delivery across development, testing, production, and country rollout environments.
• Support the DPIA and define secure data-handling principles with CISO, data-protection, country security, and engineering stakeholders.
• Review cloud and application security controls across Azure, Databricks, APIs, and supporting services while acting as the primary security contact.

Requirements

• Strong experience in security architecture and approval processes within large regulated organizations.
• Strong hands-on knowledge of Azure security, including Entra ID, Key Vault, private endpoints, and Microsoft Defender.
• Experience with penetration testing, vulnerability management, and OWASP practices, including OWASP risks for LLM and AI applications.
• Experience with code and dependency scanning using SonarQube, JFrog Xray, or similar tools.
• Strong understanding of GDPR, data protection, privacy, and secure handling of personal data.
• Experience working with CISO, security governance, privacy, and engineering teams.
• Ability to communicate security risks and controls clearly to technical and non-technical stakeholders.
• Fluent English is required.

Nice to have

• Experience in insurance, banking, or other highly regulated environments.

Culture & Benefits

• Contractor assignment expected from October 2026 to July 2027, with potential extension.
• Full-time commitment.
• Remote work within the specified Central and Eastern European locations.
• Work with a Big4 consultancy group on AI transformation, automation, advanced analytics, and financial crime prevention for leading financial institutions.

Hiring process

• Initial qualification followed by technical and client interviews.