Data Security Architect - Senior

Overview

We are looking for a Data Security Architect to join our Technical Data Protection team.

The Technical Data Protection team is responsible for building and continuously improving Plata’s company-wide data security framework. We focus on protecting sensitive information throughout its entire lifecycle by implementing secure data architectures, access controls, encryption, masking, tokenisation, data loss prevention, and monitoring solutions across the organization.

What you need

What makes you a great fit

3+ years of experience in Information Security, including hands-on experience with data security architecture or cloud security architecture.
Strong understanding of data security principles and the complete data lifecycle.
Experience designing security controls for DWH, databases, data lakes, cloud storage, data pipelines, APIs, and analytical platforms.
Good understanding of data classification, access control, encryption, key management, masking, tokenisation, anonymisation, and DLP.
Experience conducting architecture reviews, risk assessments, and threat modelling.
Understanding of privacy, financial sector, and data protection requirements.
Ability to translate security and regulatory requirements into practical technical controls.
Ability to work effectively with Data Engineering, DWH, Architecture, Infrastructure, Product, Legal, Privacy, and Compliance teams.
Strong analytical thinking and the ability to work with complex data flows and distributed environments.
Clear written and verbal communication skills.
English B2+ for working with documentation and international teams.

Your bonus skills

Experience in fintech, banking, payments, or another highly regulated industry.
Experience with Snowflake, AWS, PostgreSQL, or other modern data platforms.
Knowledge of PCI DSS and privacy regulations applicable to personal and financial data.
Experience implementing enterprise data classification or data security governance programs.
Understanding of data mesh, zero trust, and security-by-design principles.
Experience with Data Security Posture Management or Cloud Data Security solutions.
Relevant certifications in cloud, security architecture, privacy, or data protection.

Our ways of working

Innovative Spirit: a commitment to creativity and groundbreaking solutions
Honest Feedback: valuing open, transparent communication
Supportive Team: a strong, collaborative community
Celebrating Achievements: recognizing our wins together
High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances

Challenges that await you

Designing the company-wide target architecture for protecting sensitive, confidential, personal, financial, and payment data.
Defining security requirements and controls for the complete data lifecycle - collection, transmission, processing, storage, analytics, sharing, archiving, and deletion.
Working closely with DWH, Data Engineering, and Analytics teams to embed security controls into data platforms, pipelines, models, and integrations.
Identifying critical data assets, repositories, data flows, trust boundaries, and potential exposure points.
Establishing and improving the company’s data classification, labelling, ownership, and handling model.
Defining architectural requirements for encryption, key management, tokenisation, masking, anonymisation, pseudonymisation, and secrets protection.
Designing access control principles for data platforms, including least privilege, segregation of duties, role-based access control, and periodic access reviews.
Defining security requirements for databases, data lakes, data warehouses, object storage, backups, APIs, analytical tools, and data exchange mechanisms.
Performing data security risk assessments and threat modelling for new systems, products, integrations, and major architectural changes.
Developing reusable security patterns, reference architectures, standards, and technical requirements for teams working with data.
Defining the target architecture and coverage requirements for DLP, data discovery, data access monitoring, and other data protection technologies.
Supporting regulatory and contractual requirements related to personal, financial, payment, and other regulated data.
Building a long-term data security roadmap based on identified risks, business priorities, and regulatory requirements.
Supporting security reviews and providing architectural sign-off for solutions that process critical or sensitive data.
Defining data security metrics and helping measure control coverage, effectiveness, and maturity across the company.
Providing technical guidance to the Data Security Engineer and other teams implementing data protection controls.

Data Security Architect - Senior

Overview

Data Security Architect - Senior

Overview

What you need

What makes you a great fit

Your bonus skills

Our ways of working

Challenges that await you

Data Platforms & Storage

Cloud & Infrastructure

Security & Monitoring

Pay and benefits

Similar jobs at other companies

[Job - 31833] Data Manager (Data Governance), Brazil

Software Engineer - Security Engineering

Data Security Engineer

Senior Software Engineer - Product Security

Senior Information Security Engineer

Senior Product Security Engineer

Company facts

Plata Card