Senior Security Architect

Siteimprove is a leading SaaS company focused on improving digital experiences through accessibility, SEO, analytics, and compliance solutions. Our vision is to take our agentic content intelligence platform where accessibility meets performance, even further. Driving innovation and security to empower organizations to deliver inclusive, high-performing digital experiences. Security is a cornerstone of this vision, ensuring trust and resilience as we evolve and expand.

• Define and maintain security architecture for Siteimprove’s SaaS platforms, ensuring compliance with industry standards (ISO 27001, SOC 2, GDPR, HIPAA, FedRAMP).
• Establish and enforce secure coding, software design, and network architecture best practices across the SDLC.
• Champion Zero Trust Architecture principles for identity, access, and data protection.
• Conduct threat modeling, risk assessments, and architecture reviews for new and existing products.
• Collaborate with engineering and product teams to influence design decisions and embed security early in development.
• Apply Privacy by Design principles to all product features and ensure compliance with global data protection regulations.
• Develop strategies for securing AI features within Siteimprove’s products, including adherence to AI governance frameworks and responsible AI usage.
• Drive innovation in security practices, ensuring scalable and future-ready architectures as the platform evolves.
• Stay ahead of emerging technologies and evolving threat landscapes, advising leadership on strategic security initiatives.

• Education:
  
  Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 7+ years in information security roles, with at least 3 years in a security architecture capacity.
• Strong knowledge of AWS security principles and SaaS environments.
• Expertise insecure software development practices and network security design.
• Familiarity with container security and microservices architecture.
• Experience implementing security controls aligned with NIST, CIS, OWASP frameworks.
• AI Expertise:
  Understanding of risks and security considerations for AI/ML features in SaaS products.
• Experience defining policies for secure AI integration and data governance.

• Certifications:
  
  CISSP, CCSP, AWS Certified Security – Specialty, or similar.
• Knowledge of compliance frameworks (GDPR, HIPAA, FedRAMP).
• Strong influencing and communication skills to guide technical and business stakeholders.
• Ability to foster innovation while maintaining security and compliance.

• Rest and relaxation:
  Open Paid Time Off (OPTO) program for vacation, personal illness, mental health, or to care for a family member, 11 paid holidays, and volunteer leave.
• Comprehensive benefits:
  National medical plan, dental, vision, paid maternity leave, paid paternity leave, HSA, Flex, employer-sponsored short-term, long-term disability, discounts to volunteer plans to meet your family needs, and more!
• Prepare for the future: 401(k) with a company match to provide a better future in your retirement years.

The pay for the successful candidate will depend on various factors, including work location, relevant knowledge, skills, qualifications, and experience.