Data Security Architect - Middle

Role overview

Shape the architecture and standards used to protect sensitive data across an organization’s products, cloud platforms, data warehouses, and internal systems. The role spans the full data lifecycle, balancing practical engineering controls with privacy, regulatory, and business requirements, and working closely with data, infrastructure, product, and compliance teams.

Responsibilities

- Map critical data assets, flows, trust boundaries, and exposure risks across distributed platforms. - Set protection requirements for data collection, processing, storage, sharing, retention, and deletion. - Establish reusable controls and design patterns for encryption, key management, tokenisation, masking, anonymisation, secrets, and least-privilege access. - Review architectures and conduct risk assessments and threat modelling for systems, integrations, and significant changes. - Guide data classification, ownership, handling, monitoring, discovery, and loss-prevention practices. - Build a data security roadmap, define measures of control coverage and maturity, and advise engineers implementing protections.

Requirements

- At least three years in information security, including hands-on data security or cloud security architecture work. - Understanding of data protection throughout its lifecycle and experience securing data warehouses, databases, lakes, cloud storage, pipelines, APIs, or analytics platforms. - Knowledge of classification, access control, encryption, key management, masking, tokenisation, anonymisation, and data loss prevention. - Experience with architecture reviews, security risk assessments, and threat modelling. - Ability to turn privacy, regulatory, and security requirements into practical technical controls and collaborate across technical and nontechnical teams. - Strong analytical and communication skills, with English at B2 level or above.

Nice to have

- Background in fintech, banking, payments, or another regulated sector; familiarity with PCI DSS or privacy rules for personal and financial data. - Experience with Snowflake, AWS, PostgreSQL, enterprise data classification, data security governance, data mesh, zero trust, or data security posture tools. - Relevant cloud, security architecture, privacy, or data protection certifications.

Benefits and work setup

- Flexible office or remote work, with relocation support for the employee and family to hubs in Georgia, Cyprus, or Kazakhstan. - Healthcare coverage, education and wellness budgets, annual leave, and paid sick leave under applicable policies.