Security Architect (Prague, hybrid)

We are looking for someone to own security architecture for a regulated financial-sector client in Prague. You will shape how systems, cloud environments and applications are designed securely, and you will be the person who reviews changes, names the risks and proposes how to mitigate them.

What you will be responsible for

• Designing and developing the organisation's security architecture, including security standards and architectural principles
• Security reviews of new systems, projects and changes, with clear risk assessments and mitigation proposals
• Architectural recommendations and exceptions, and the risk acceptance process together with IT Risk Management
• Compliance of the architecture with DORA, EBA Guidelines, NIS2 and regulator requirements, including support for audits and regulatory reviews
• Security controls for cloud environments (AWS, Azure) and for SaaS, PaaS, IaaS and container-based architectures
• Automating security processes and sharing knowledge with colleagues

What we expect from you

• Experience in Cyber Security, IT Security Architecture or Enterprise Architecture
• Ability to design security measures across infrastructure, networks, identities and applications
• Hands-on orientation in cloud environments (AWS, Azure or GCP)
• Knowledge of ISO 27001, NIST, CIS Controls or similar frameworks, and of IT Risk Management
• Deeper expertise in at least one area: cloud security, IAM/PAM, network security, application security/DevSecOps, security monitoring, data protection, vulnerability management, Zero Trust or infrastructure security
• Ability to defend security requirements and find a pragmatic balance with business needs
• Fluent Czech or Slovak and at least basic English

Nice to have

• Experience in banking or another regulated environment
• DORA and NIS2 controls design, security audits
• Certifications such as CISSP, CCSP, SABSA, TOGAF or AWS/Azure Security
• Security architecture for cloud transformations