Security Architect (Azure / AI / GDPR)

About Gramian Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs. About the Role Our client is a Big4 Consultancy group that works with leading financial institutions on AI-driven transformation, automation, advanced analytics, and financial crime prevention. Their work spans intelligent fraud detection, AML/KYC modernization, autonomous workflows, enterprise AI platforms, and the secure industrialization of AI in highly regulated environments. We are looking for an experienced Security Architect to lead the security approval and data-protection readiness of the solution. You will act as the main technical security contact with the client’s CISO, data-protection, and country security teams, covering cloud security, AI/LLM risk, penetration testing, secure data handling, and formal architecture approvals. CONTRACT: Contractor assignment, expected October 2026 – July 2027, with potential extension COMMITMENT: Full-time LOCATIONS: Central and Eastern Europe, EU-authorized, REMOTE PROCESS: Initial qualification followed by technical and client interviews NOTES: Fluent English is required. Responsibilities - Review the end-to-end security architecture across identity, access, secrets, networking, data handling, and logging. - Ensure sensitive and personal data are handled securely and are not exposed through logs or operational tooling. - Prepare and drive formal security architecture approval and new-technology review processes. - Support security reviews covering AI / LLM usage, web search, and new technology components. - Coordinate penetration testing and follow up on remediation of findings. - Support the Data Protection Impact Assessment (DPIA) and AI model-risk review. - Define and agree data-handling principles with the client CISO, data-protection, and country security teams. - Review cloud and application security controls across Azure, Databricks, APIs, and supporting services. - Support secure delivery across development, testing, production, and country rollout environments. - Act as the primary security point of contact between engineering teams and client security stakeholders. Requirements - Strong experience in security architecture and approval processes within large regulated organizations. - Strong hands-on knowledge of Azure security, including Entra ID, Key Vault, private endpoints, and Microsoft Defender. - Experience with penetration testing, vulnerability management, and OWASP practices. - Knowledge of OWASP security risks for LLM / AI applications. - Experience with code and dependency scanning using tools such as SonarQube, JFrog Xray, or similar. - Strong understanding of GDPR, data protection, privacy, and secure handling of personal data. - Experience working with CISO, security governance, privacy, and engineering teams. - Ability to communicate security risks and controls clearly to both technical and non-technical stakeholders. - Highly preferred: Experience in insurance, banking, or other highly regulated environments.