[Hiring] Security / Compliance Architect @NATIONMIND LLC

Role Description

The Security / Compliance Architect is the primary security design authority for the engagement. This role is responsible for:

• Defining the controlled data boundary.
• Translating compliance and business requirements into enforceable controls.
• Shaping the secure enclave design.
• Ensuring the overall solution is defensible from a governance, audit, and risk-management standpoint.

This is a client-facing onshore role requiring strong experience in data protection, compliance-aligned architecture, information protection controls, and regulated collaboration environments.

Key Responsibilities

• Lead the definition of the controlled data / CUI boundary, including in-scope users, repositories, workflows, endpoints, and approved handling paths.
• Translate customer requirements into a target-state security architecture for a secure collaboration enclave.
• Define the DLP and information protection strategy across collaboration, email, endpoint, and removable media channels.
• Establish the control intent for classification, labeling, monitoring, restriction, blocking, exception handling, and audit evidence generation.
• Drive alignment between business process requirements and security control design to ensure the solution is usable as well as compliant.
• Lead design decisions related to:
  • Approved vs non-approved storage locations
  • Secure collaboration patterns
  • External sharing restrictions
  • Exception governance
  • Evidence and logging requirements
• Review current-state data handling patterns and identify exposure points, control gaps, and architectural risks.
• Produce client-facing security design artifacts, including boundary definitions, control strategies, architecture requirements, and decision packs.
• Support design reviews, steering discussions, and executive readouts.
• Work closely with the platform lead to ensure Microsoft control implementation aligns with security intent.
• Support pilot validation by reviewing policy effectiveness, exception scenarios, usability impacts, and audit defensibility.
• Provide oversight during deployment and handover to ensure the final state aligns with the approved security design.

Qualifications

• 8+ years in cybersecurity architecture, security consulting, or security engineering roles.
• Strong experience in one or more of the following:
  • Data Loss Prevention
  • Information Protection / Data Classification
  • Secure collaboration architecture
  • Microsoft Purview / MIP / DLP
  • Compliance-driven security design
• Experience defining and operationalizing controls for sensitive or regulated data.
• Strong understanding of:
  • Secure data boundaries
  • Access control and least privilege concepts
  • Audit evidence requirements
  • Policy exception governance
  • Endpoint, email, and collaboration security controls
• Experience working directly with business stakeholders, security leadership, and platform teams in regulated environments.
• Strong workshop facilitation, requirements analysis, and executive communication skills.
• Ability to convert ambiguous customer requirements into precise security architecture decisions.

Requirements

• This is a remote position.