CIS Security Architect

The role is offered by ITFS and involves working on a project identified as P3629. The position is fully remote and based in Poland.

• Minimum 5 years of experience in cloud security architecture
• Practical experience with Microsoft Azure cloud security
• Strong knowledge of CIS Controls and CIS Benchmarks, especially for Microsoft Azure
• Good knowledge of at least one standard: NIST, ISO 27001, or CIS
• Experience designing secure cloud architectures and performing risk assessments
• Practical experience analyzing, assessing, and prioritizing security controls
• Experience recommending remediation or risk acceptance decisions
• Ability to evaluate projects for security and compliance requirements
• Experience collaborating with Security Governance, Compliance, and Audit teams
• Excellent communication and interpersonal skills
• Ability to independently make decisions and prioritize tasks under multiple requirements
• English language proficiency at minimum C1 level

Nice to have:

• Security certifications such as AZ-500, CISSP, CISM, or related CIS certificates
• Experience working in complex enterprise environments
• Experience automating compliance, security assessment, or cloud security processes

• Analyze and interpret CIS Benchmarks, particularly for Microsoft Azure environments
• Translate security requirements and controls into technical implementation guidelines
• Analyze security controls, assess criticality, perform triage, and prioritize them
• Set action priorities based on risk level, business impact, and remediation feasibility
• Design and evaluate secure cloud architectures in Microsoft Azure
• Conduct structured risk assessments according to CIS, NIST, and ISO 27001 frameworks
• Advise on remediation or risk acceptance decisions with justification documentation
• Document risks, requirement deviations, and recommended countermeasures
• Review and validate projects for compliance with security standards and best practices
• Collaborate with Security Governance, Compliance, and Audit teams
• Present and justify risk decisions to technical and business teams