InfoSec Management & Compliance Lead
RemoteHungary
Job Summary
Define and enforce the security posture of the enterprise data lakehouse platform by implementing frameworks for RBAC, ABAC, and column/row-level security. Lead compliance programs for GDPR, CCPA, HIPAA, SOC 2, and PCI-DSS while conducting data risk assessments, threat modeling, and vulnerability assessments. Manage encryption standards for data at rest and in transit, oversee encryption policies, and respond to security incidents with root cause analysis. Partner with platform teams to embed security controls into CI/CD and data workflows, maintain compliance documentation, and train engineering teams on secure data handling practices. This talent pipeline role is open only to candidates currently based in Hungary with the legal right to work there.
Required Qualifications
- 8+ years in information security
- 3+ years in data or cloud platform security
- Deep knowledge of cloud security services: AWS IAM/KMS, Azure Purview/Defender, GCP Security Command Center
- Hands-on experience with Unity Catalog (Databricks), Snowflake RBAC, or equivalent lakehouse security layers
- Proven track record managing regulatory compliance programs (SOC 2, GDPR, HIPAA)
- Strong understanding of NIST, CIS, and ISO 27001 security frameworks
- Experience with SIEM tools, DLP solutions, and security monitoring platforms
- Excellent communication skills for translating security risks to executive and business stakeholders
- Bachelor's degree in Cybersecurity, Information Systems, or related field
- Currently based in Hungary
- Have the legal right to live and work in Hungary
Desired Qualifications
- CISSP, CISM, CISA, or CCSP certification
- Experience with zero trust architecture and data fabric security models
- Familiarity with AI/ML model security and responsible AI governance
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.