# Security Architect (Azure / AI / GDPR)

> Gramian Consulting Group · Poland (Remote) · Contract · Posted 2026-11-10

**Workplace:** remote

**Department:** Recruiting - P

## Description

### About Gramian

Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs.

### About the Role

Our client is a Big4 Consultancy group that works with leading financial institutions on **AI-driven transformation, automation, advanced analytics, and financial crime prevention**. Their work spans intelligent fraud detection, AML/KYC modernization, autonomous workflows, enterprise AI platforms, and the secure industrialization of AI in highly regulated environments.

We are looking for an experienced **Security Architect** to lead the security approval and data-protection readiness of the solution. You will act as the main technical security contact with the client’s **CISO, data-protection, and country security teams**, covering cloud security, AI/LLM risk, penetration testing, secure data handling, and formal architecture approvals.

**CONTRACT:** Contractor assignment, expected October 2026 – July 2027, with potential extension

**COMMITMENT:** Full-time

**LOCATIONS:** Central and Eastern Europe, EU-authorized, REMOTE

**PROCESS:** Initial qualification followed by technical and client interviews

**NOTES:** Fluent English is required.

### Responsibilities

-   Review the end-to-end **security architecture** across identity, access, secrets, networking, data handling, and logging.
-   Ensure sensitive and personal data are handled securely and are not exposed through logs or operational tooling.
-   Prepare and drive formal **security architecture approval** and new-technology review processes.
-   Support security reviews covering **AI / LLM usage, web search, and new technology components**.
-   Coordinate penetration testing and follow up on remediation of findings.
-   Support the **Data Protection Impact Assessment (DPIA)** and AI model-risk review.
-   Define and agree data-handling principles with the client CISO, data-protection, and country security teams.
-   Review cloud and application security controls across Azure, Databricks, APIs, and supporting services.
-   Support secure delivery across development, testing, production, and country rollout environments.
-   Act as the primary security point of contact between engineering teams and client security stakeholders.

## Requirements

-   Strong experience in **security architecture and approval processes** within large regulated organizations.
-   Strong hands-on knowledge of **Azure security**, including Entra ID, Key Vault, private endpoints, and Microsoft Defender.
-   Experience with **penetration testing, vulnerability management, and OWASP** practices.
-   Knowledge of **OWASP security risks for LLM / AI applications**.
-   Experience with **code and dependency scanning** using tools such as SonarQube, JFrog Xray, or similar.
-   Strong understanding of **GDPR, data protection, privacy, and secure handling of personal data**.
-   Experience working with CISO, security governance, privacy, and engineering teams.
-   Ability to communicate security risks and controls clearly to both technical and non-technical stakeholders.
-   Highly preferred: Experience in **insurance, banking, or other highly regulated environments**.

## Apply

[Apply at Gramian Consulting Group](https://apply.workable.com/gramian/j/BEA77216D4/apply)

---
Powered by [Workable](https://www.workable.com)