Security Architect (Azure / AI / GDPR)

About Gramian

Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs.

About the Role

Our client is a Big4 Consultancy group that works with leading financial institutions onAI-driven transformation, automation, advanced analytics, and financial crime prevention. Their work spans intelligent fraud detection, AML/KYC modernization, autonomous workflows, enterprise AI platforms, and the secure industrialization of AI in highly regulated environments.

We are looking for an experiencedSecurity Architectto lead the security approval and data-protection readiness of the solution. You will act as the main technical security contact with the client’sCISO, data-protection, and country security teams, covering cloud security, AI/LLM risk, penetration testing, secure data handling, and formal architecture approvals.

CONTRACT:Contractor assignment, expected October 2026 – July 2027, with potential extension

COMMITMENT: Full-time

LOCATIONS: Central and Eastern Europe, EU-authorized, REMOTE

PROCESS: Initial qualification followed by technical and client interviews

NOTES:Fluent English is required.

Responsibilities

• Review the end-to-endsecurity architectureacross identity, access, secrets, networking, data handling, and logging.
• Ensure sensitive and personal data are handled securely and are not exposed through logs or operational tooling.
• Prepare and drive formalsecurity architecture approvaland new-technology review processes.
• Support security reviews coveringAI / LLM usage, web search, and new technology components.
• Coordinate penetration testing and follow up on remediation of findings.
• Support theData Protection Impact Assessment (DPIA)and AI model-risk review.
• Define and agree data-handling principles with the client CISO, data-protection, and country security teams.
• Review cloud and application security controls across Azure, Databricks, APIs, and supporting services.
• Support secure delivery across development, testing, production, and country rollout environments.
• Act as the primary security point of contact between engineering teams and client security stakeholders.

Requirements

• Strong experience insecurity architecture and approval processeswithin large regulated organizations.
• Strong hands-on knowledge ofAzure security, including Entra ID, Key Vault, private endpoints, and Microsoft Defender.
• Experience withpenetration testing, vulnerability management, and OWASPpractices.
• Knowledge ofOWASP security risks for LLM / AI applications.
• Experience withcode and dependency scanningusing tools such as SonarQube, JFrog Xray, or similar.
• Strong understanding ofGDPR, data protection, privacy, and secure handling of personal data.
• Experience working with CISO, security governance, privacy, and engineering teams.
• Ability to communicate security risks and controls clearly to both technical and non-technical stakeholders.
• Highly preferred: Experience ininsurance, banking, or other highly regulated environments.