Data Security Architect - Middle

We are looking for a Data Security Architect to join our Technical Data Protection team.

The Technical Data Protection team is responsible for building and continuously improving Plata’s company-wide data security framework. We focus on protecting sensitive information throughout its entire lifecycle by implementing secure data architectures, access controls, encryption, masking, tokenisation, data loss prevention, and monitoring solutions across the organization.

As a Data Security Architect, you will define and develop the company's target data security architecture, establishing consistent protection standards across products, data warehouses, cloud platforms, internal systems, and integrations. You'll collaborate closely with Data Engineering, Product, Architecture, Infrastructure, Information Security, Legal, Privacy, and Compliance teams to design scalable security solutions, strengthen data protection practices, and ensure sensitive information remains secure across all environments.

Challenges that await you:

• Designing the company-wide target architecture for protecting sensitive, confidential, personal, financial, and payment data.
• Defining security requirements and controls for the complete data lifecycle - collection, transmission, processing, storage, analytics, sharing, archiving, and deletion.
• Working closely with DWH, Data Engineering, and Analytics teams to embed security controls into data platforms, pipelines, models, and integrations.
• Identifying critical data assets, repositories, data flows, trust boundaries, and potential exposure points.
• Establishing and improving the company’s data classification, labelling, ownership, and handling model.
• Defining architectural requirements for encryption, key management, tokenisation, masking, anonymisation, pseudonymisation, and secrets protection.
• Designing access control principles for data platforms, including least privilege, segregation of duties, role-based access control, and periodic access reviews.
• Defining security requirements for databases, data lakes, data warehouses, object storage, backups, APIs, analytical tools, and data exchange mechanisms.
• Performing data security risk assessments and threat modelling for new systems, products, integrations, and major architectural changes.
• Developing reusable security patterns, reference architectures, standards, and technical requirements for teams working with data.
• Defining the target architecture and coverage requirements for DLP, data discovery, data access monitoring, and other data protection technologies.
• Supporting regulatory and contractual requirements related to personal, financial, payment, and other regulated data.
• Building a long-term data security roadmap based on identified risks, business priorities, and regulatory requirements.
• Supporting security reviews and providing architectural sign-off for solutions that process critical or sensitive data.
• Defining data security metrics and helping measure control coverage, effectiveness, and maturity across the company.
• Providing technical guidance to the Data Security Engineer and other teams implementing data protection controls.

Our technology stack:

Data Platforms & Storage

• Cloud data warehouses and data lakes.
• Relational and NoSQL databases.
• Object storage and backup platforms.
• ETL/ELT pipelines, analytical platforms, and data integration services.
• Snowflake, PostgreSQL, Amazon Aurora, Amazon S3, and related technologies.

Cloud & Infrastructure

• AWS and cloud-native security services.
• Kubernetes and Docker.
• IAM, OIDC/SAML SSO, and RBAC.
• Key management, secrets management, and encryption technologies.

Security & Monitoring

• Data Loss Prevention solutions.
• Data discovery and classification technologies.
• SIEM and security monitoring platforms.
• Data access and audit logs.
• Jira Service Management and GitLab.

What makes you a great fit:

• 3+ years of experience in Information Security, including hands-on experience with data security architecture or cloud security architecture.
• Strong understanding of data security principles and the complete data lifecycle.
• Experience designing security controls for DWH, databases, data lakes, cloud storage, data pipelines, APIs, and analytical platforms.
• Good understanding of data classification, access control, encryption, key management, masking, tokenisation, anonymisation, and DLP.
• Experience conducting architecture reviews, risk assessments, and threat modelling.
• Understanding of privacy, financial sector, and data protection requirements.
• Ability to translate security and regulatory requirements into practical technical controls.
• Ability to work effectively with Data Engineering, DWH, Architecture, Infrastructure, Product, Legal, Privacy, and Compliance teams.
• Strong analytical thinking and the ability to work with complex data flows and distributed environments.
• Clear written and verbal communication skills.
• English B2+ for working with documentation and international teams.

Your bonus skills:

• Experience in fintech, banking, payments, or another highly regulated industry.
• Experience with Snowflake, AWS, PostgreSQL, or other modern data platforms.
• Knowledge of PCI DSS and privacy regulations applicable to personal and financial data.
• Experience implementing enterprise data classification or data security governance programs.
• Understanding of data mesh, zero trust, and security-by-design principles.
• Experience with Data Security Posture Management or Cloud Data Security solutions.
• Relevant certifications in cloud, security architecture, privacy, or data protection.

Our ways of working:

Our benefits: