Privacy & Security Architect

We are looking for an experienced Privacy and Security Architect to drive the organisation's security architecture, data protection, compliance, and risk management initiatives. The role will be responsible for strengthening our security posture across applications, infrastructure, payment systems, and cloud environments. You will lead vulnerability assessments, ethical hacking, SIEM operations, and DevSecOps initiatives while ensuring compliance with relevant global security and data privacy standards. This role requires a hands-on security professional who can combine technical expertise with security governance and work closely with Engineering, DevOps, Product, and business teams to build a secure technology ecosystem.

Responsibilities:

• Design, implement, and maintain a comprehensive security architecture to identify and mitigate organisational security risks.
• Conduct ethical hacking, penetration testing, vulnerability assessments, and security audits to identify and remediate potential threats.
• Set up, manage, and maintain SIEM solutions for real-time security monitoring, threat detection, and incident response.
• Drive DevSecOps practices and integrate security checks across CI/CD pipelines and infrastructure.
• Lead compliance initiatives across PCI-DSS, GDPR, ISO 27001, SOC 2, and applicable financial regulations.
• Establish and enforce security governance policies, access controls, incident response procedures, and data protection practices.
• Collaborate with Engineering, Product, and DevOps teams to embed security and privacy into application design and development.
• Lead security incident management, root cause analysis, remediation, and regulatory reporting wherever required.
• Strengthen application and API security across microservices, cloud infrastructure, and multi-tenant environments.
• Drive security awareness initiatives and ensure organisation-wide adherence to information security policies.

Requirements:

• 6-12 years of experience in cybersecurity, information security, data privacy, and compliance.
• Proven hands-on experience in ethical hacking, penetration testing, and vulnerability management.
• Strong understanding of DevSecOps practices, secure SDLC, and application security.
• Hands-on experience with SIEM platforms, security monitoring, and threat detection tools.
• In-depth knowledge of security and compliance frameworks, including PCI-DSS, GDPR, ISO 27001, and SOC 2.
• Strong understanding of OWASP standards, secure coding practices, API security, and application vulnerability management.
• Experience securing financial applications, payment systems, and sensitive customer data, including fraud prevention and financial threat modelling.
• Understanding of microservices architecture, API integrations, and data security models.
• Experience securing cloud infrastructure, particularly Microsoft Azure environments.
• Knowledge of Kubernetes security, including pod security, network policies, and container security.
• Strong understanding of security risk assessment, incident response, and business continuity practices.

Good to Have:

• Experience working with multi-tenant platforms or large-scale LMS/EdTech deployments.
• Familiarity with accessibility and digital learning standards.
• Hands-on experience with Azure Front Door and Datadog for application delivery, monitoring, and security.
• Experience implementing security controls across distributed and cloud-native environments.
• Certifications such as CISSP, CISM, CISA, PCI ISA, or other recognised cybersecurity and data privacy credentials.

What Makes Someone Successful Here:

• Proactively identifies vulnerabilities and builds security into systems from the ground up.
• Combines practical experience in ethical hacking, application security, cloud security, and DevSecOps.
• Takes accountability for identifying, prioritising, and mitigating security risks.
• Understands regulatory requirements and translates them into practical security controls.
• Can respond effectively to security incidents, lead investigations, and drive corrective actions.
• Works closely with Engineering, Product, and DevOps teams to establish a strong security culture.

Skills

Architect, Architecture, Azure, Cyber Security, DevSecOps, Information Security, Kubernetes, OWASP, SIEM, Security