Principal Business Information Security Specialist

Serve as a key security advisor across product, platform, and technology teams ensuring integration of security principles throughout design, development, and delivery.

Conduct Security Architecture Reviews and compliance assessments for cloud, applications, and technology platforms aligned with standards like ISO 27001, PCI DSS, SOC 2, NIS2, GDPR, and emerging AI regulations.

Support secure software development lifecycles and DevSecOps practices, guide AI/ML solution security assessments, and contribute to developing reusable secure architecture patterns.

Degree in Computer Science, Information Security, Engineering, or related field, or equivalent practical experience.

Approximately 10 years of experience in cybersecurity, information security, or cloud security.

Hands-on knowledge of security architecture, secure design, risk assessments, and experience with cloud environments (Azure, AWS, or GCP) and DevSecOps practices.

Familiarity with security standards and regulations: ISO 27001/ISMS, PCI DSS, SOC 2, NIS2, GDPR, and AI security regulations.

Experienced working within global or large-scale security functions closely partnering with product, architecture, and engineering teams.

Comfortable navigating complex regulatory and compliance frameworks related to cloud and AI security.

Able to translate corporate security policies into actionable standards and influence cross-functional teams on secure design and risk mitigation.