Information Security Architect

• Develop, implement, and manage information security initiatives in line with ISO 2700x, ISO 22301, SOC 2, CSA STAR, financial regulations (e.g. Circular 285, DORA, NIS2), and data protection legislation (GDPR)
• Design and contribute to the implementation and management of security solutions and components such as EDR/XDR, email security (anti-phishing, protection and remediation processes), SASE, DLP, and Identity, ensuring proper configuration, integration, and fine-tuning
• Identify, assess, and effectively manage information security risks, translating them into technical requirements, measures, and implementable controls, while ensuring compliance with regulations and industry best practices
• Collaborate with internal and external stakeholders to ensure regulatory compliance and effective information security risk management
• Develop and maintain information security policies, procedures, and guidelines for the entire organization, supporting and promoting their adoption
• Monitor security design and remediation initiatives, managing milestones, dependencies, and stakeholders
• Deliver training and awareness initiatives across the organization on information security and security best practices
• Support governance and audit activities (evidence collection, audit support, remediation activities, and documentation)

• STEM degree in Computer Science or related disciplines
• At least 5 years of experience in technical cybersecurity roles (solution design and implementation)
• Strong knowledge of information security technologies and systems
• Excellent understanding of common attack techniques and vectors (e.g. phishing, credential theft, lateral movement) and familiarity with widely used operating systems
• Knowledge of vulnerability management (identification, prioritization, and remediation management)
• Basic knowledge of incident response (triage, containment, and initial event management in collaboration with involved teams)
• Basic knowledge of networking and VPN technologies
• Knowledge of information security regulations, laws, and industry best practices
• Operational knowledge of project management
• Excellent communication and presentation skills
• Excellent written and spoken English

Industry certifications (e.g. CISSP, CCSP, ISO/IEC 27001, ITIL, PMP/PMI or equivalent) and product-specific security certifications will be considered a strong plus

• Compensation, consisting of a fixed and a variable component
• Welfare Plan
• Benefits, including all initiatives for the well-being of our people
• Remote working
• People Program
• Training
• Win/Win Policy
• Phygital Management
• Community
• Diversity
• Impact