Cyber Security Architecture & Engineering Lead

Our client is one of the largest retail and commercial consumer goods groups operating across Greece and Southeastern Europe. The role exists to lead security architecture and engineering initiatives as part of an enterprise-wide, multi-year digital transformation roadmap.

The Role

You will own security architecture and technical controls across the group's digital, cloud, and e-commerce platforms, serving as the bridge between technical execution and business objectives. Leading a dedicated engineering team, you will drive a balanced ~70% hands-on implementation and ~30% technical leadership and governance mandate. In your first six months, you will establish core baseline hardening standards, architect and rollout standardized DLP and network segmentation frameworks, and integrate security checkpoints into all active transformation projects.

Key Responsibilities

• Own technical security architecture across all new digital, e-commerce, and infrastructure initiatives from initial review through deployment
• Design, implement, and optimize robust network and cloud security controls, including firewalls, WAF, IDS/IPS, network segmentation (East-West traffic), SD-WAN concepts, and DDoS mitigation
• Build, deploy, and refine comprehensive Data Loss Prevention (DLP) policies across endpoint, email, and cloud environments while establishing continuous classification schemes
• Direct endpoint protection, Identity & Access Management (IAM/PAM), and Conditional Access policies utilizing tools such as Microsoft Defender/EDR
• Define hardening guidelines, cryptographic controls, and secure system configurations in close collaboration with infrastructure and IT systems teams
• Oversee system security testing, secure engineering reviews, and security change-control workflows
• Mentor and lead senior technical engineers while partnering with peer leads across SecOps and GRC

What You'll Bring

• 5+ years of hands-on experience in cybersecurity engineering, security operations, or security architecture
• Proven track record designing and configuring network security (WAF, next-gen firewalls, network segregation) and enterprise endpoint protection/EDR solutions
• Strong hands-on implementation experience with DLP architectures, IAM/PAM frameworks, and Conditional Access policies
• Solid working knowledge of cloud security, with a strong focus on Microsoft Azure or multi-cloud environments
• Strong communication skills with the ability to translate technical risk into clear business context
• Fluency in Greek and professional working proficiency in English
• Bachelor’s degree in Computer Science, Information Security, Telecommunications, Engineering, or a related discipline

Nice to Have

• Professional industry certifications such as CISSP, CCSP, CSSLP, ISSAP, or CompTIA Security+
• Master’s degree (MSc) or PhD in Cyber Security or Information Security
• Prior experience leading, mentoring, or coordinating engineering project pods

What's in it for You

You will receive a competitive compensation package of up to €4,600 gross per month depending on experience, complemented by an annual performance bonus. The benefits package includes comprehensive private health and pension coverage, corporate meal vouchers, mobile phone subsidy and substantial group retail employee discounts. Work is organized on a flexible hybrid schedule (typically 2 days remote) based in northern Athens (Kifissia area), with pure architecture and engineering focus and zero 24/7 standby or incident response duties.