Skip to content

Open nowPosted 31 hours ago

Data Security Architect - Senior

Plata Card150 open roles

Where
Belgrade
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowData Security Architect - SeniorPlata Card · Belgrade
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Plata Card's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. Plata Card postings stay open a median of 22 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted 31 hours ago

Plata Card median: 22 days open

The posting

We are looking for a Data Security Architect to join our Technical Data Protection team.

The Technical Data Protection team is responsible for building and continuously improving Plata’s company-wide data security framework. We focus on protecting sensitive information throughout its entire lifecycle by implementing secure data architectures, access controls, encryption, masking, tokenisation, data loss prevention, and monitoring solutions across the organization.

As a Data Security Architect, you will define and develop the company's target data security architecture, establishing consistent protection standards across products, data warehouses, cloud platforms, internal systems, and integrations. You'll collaborate closely with Data Engineering, Product, Architecture, Infrastructure, Information Security, Legal, Privacy, and Compliance teams to design scalable security solutions, strengthen data protection practices, and ensure sensitive information remains secure across all environments.

Challenges that await you:

  • Designing the company-wide target architecture for protecting sensitive, confidential, personal, financial, and payment data.
  • Defining security requirements and controls for the complete data lifecycle - collection, transmission, processing, storage, analytics, sharing, archiving, and deletion.
  • Working closely with DWH, Data Engineering, and Analytics teams to embed security controls into data platforms, pipelines, models, and integrations.
  • Identifying critical data assets, repositories, data flows, trust boundaries, and potential exposure points.
  • Establishing and improving the company’s data classification, labelling, ownership, and handling model.
  • Defining architectural requirements for encryption, key management, tokenisation, masking, anonymisation, pseudonymisation, and secrets protection.
  • Designing access control principles for data platforms, including least privilege, segregation of duties, role-based access control, and periodic access reviews.
  • Defining security requirements for databases, data lakes, data warehouses, object storage, backups, APIs, analytical tools, and data exchange mechanisms.
  • Performing data security risk assessments and threat modelling for new systems, products, integrations, and major architectural changes.
  • Developing reusable security patterns, reference architectures, standards, and technical requirements for teams working with data.
  • Defining the target architecture and coverage requirements for DLP, data discovery, data access monitoring, and other data protection technologies.
  • Supporting regulatory and contractual requirements related to personal, financial, payment, and other regulated data.
  • Building a long-term data security roadmap based on identified risks, business priorities, and regulatory requirements.
  • Supporting security reviews and providing architectural sign-off for solutions that process critical or sensitive data.
  • Defining data security metrics and helping measure control coverage, effectiveness, and maturity across the company.
  • Providing technical guidance to the Data Security Engineer and other teams implementing data protection controls.

Our technology stack:

Data Platforms & Storage

  • Cloud data warehouses and data lakes.
  • Relational and NoSQL databases.
  • Object storage and backup platforms.
  • ETL/ELT pipelines, analytical platforms, and data integration services.
  • Snowflake, PostgreSQL, Amazon Aurora, Amazon S3, and related technologies.

Cloud & Infrastructure

  • AWS and cloud-native security services.
  • Kubernetes and Docker.
  • IAM, OIDC/SAML SSO, and RBAC.
  • Key management, secrets management, and encryption technologies.

Security & Monitoring

  • Data Loss Prevention solutions.
  • Data discovery and classification technologies.
  • SIEM and security monitoring platforms.
  • Data access and audit logs.
  • Jira Service Management and GitLab.

What makes you a great fit:

  • 3+ years of experience in Information Security, including hands-on experience with data security architecture or cloud security architecture.
  • Strong understanding of data security principles and the complete data lifecycle.
  • Experience designing security controls for DWH, databases, data lakes, cloud storage, data pipelines, APIs, and analytical platforms.
  • Good understanding of data classification, access control, encryption, key management, masking, tokenisation, anonymisation, and DLP.
  • Experience conducting architecture reviews, risk assessments, and threat modelling.
  • Understanding of privacy, financial sector, and data protection requirements.
  • Ability to translate security and regulatory requirements into practical technical controls.
  • Ability to work effectively with Data Engineering, DWH, Architecture, Infrastructure, Product, Legal, Privacy, and Compliance teams.
  • Strong analytical thinking and the ability to work with complex data flows and distributed environments.
  • Clear written and verbal communication skills.
  • English B2+ for working with documentation and international teams.

Your bonus skills:

  • Experience in fintech, banking, payments, or another highly regulated industry.
  • Experience with Snowflake, AWS, PostgreSQL, or other modern data platforms.
  • Knowledge of PCI DSS and privacy regulations applicable to personal and financial data.
  • Experience implementing enterprise data classification or data security governance programs.
  • Understanding of data mesh, zero trust, and security-by-design principles.
  • Experience with Data Security Posture Management or Cloud Data Security solutions.
  • Relevant certifications in cloud, security architecture, privacy, or data protection.

Our ways of working:

  • Innovative Spirit: a commitment to creativity and groundbreaking solutions
  • Honest Feedback: valuing open, transparent communication
  • Supportive Team: a strong, collaborative community
  • Celebrating Achievements: recognizing our wins together
  • High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances

Our benefits:

  • Relocation support to one of our hubs — Georgia, Cyprus, Kazakstan — with assistance for the employee and their family
  • Flexible work from one of our offices or remote
  • Healthcare Coverage
  • Education Budget: Language lessons, professional training and certifications
  • Wellness Budget: Mental health and fitness activity reimbursements
  • Vacation Policy: Annual leave and paid sick leave as per applicable policies
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Plata Card's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Plata Card's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Plata Card's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.