Lead for Platform Security & Data Privacy (CX)

Our company, act digital Polska, provides IT services globally, focusing on matching client needs with employee skills and aspirations. We support a diverse community of employees and consultants.

• Over 5 years of experience in information security, data privacy, or access control systems.
• Proven experience designing and implementing complex security architecture.
• Strong knowledge of modern authorization frameworks, RBAC/ABAC systems, and data classification methodologies.
• Experience leading teams and influencing cross-functional stakeholders.
• Technical background with understanding of databases, APIs, and enterprise software architecture, including development with Python.
• Understanding of data privacy regulations (GDPR, CCPA) and their technical implementation.
• Proficiency in English (B2+/C1 level).

Nice to have:

• Knowledge of AI/ML systems and related privacy challenges.
• Familiarity with LLMs and privacy implications in enterprise.
• Understanding of vector databases and embedding-based systems.
• Experience in regulated industries (finance, healthcare, legal) with complex information barrier requirements.
• Background in data lineage and provenance tracking.

Strategic Leadership:

• Design and implement data privacy and access control architecture that includes multi dimensional classification, dynamic permissions, and information barriers.
• Lead a small dedicated team focused on privacy-preserving access controls.
• Coordinate with teams including data ingestion, knowledge mapping, and automation developers.
• Develop and enforce security and privacy standards, policies, and best practices during product development.

Technical Implementation:

• Architect a multi-layered access control model combining Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and purpose-based limitations.
• Oversee fine-grained data classification frameworks using NLP and other technologies.
• Design and validate permission propagation for graph data models and derived insights.
• Establish security boundaries for autonomous AI agents ensuring context isolation and privilege controls.

Cross-Team Coordination:

• Integrate privacy controls into data pipeline, knowledge graph, and AI components with engineering teams.
• Collaborate with product management to balance privacy requirements with usability.
• Coordinate with customer success to address client-specific privacy and compliance needs.
• Guide development teams to prioritize privacy-by-design principles.

If you applied for this position, ACT DIGITAL POLSKA Sp. z o.o., based in Warsaw, is the personal data controller. The personal data will be processed for recruitment and future recruitment processes. Candidates have rights to access, rectify, erase, restrict processing, data portability, objection, and lodging complaints to the Personal Data Protection Office.