Principal Security Architect

About the role

We are looking for a senior security expert to own and shape iubenda’s security posture across AI, infrastructure, and code. This hands‑on individual contributor role influences the entire company and reports directly to senior leadership.

Key responsibilities

• Define and drive the security strategy, architecture, and roadmap for our platform, cloud infrastructure, and internal systems.
• Own AI security, ensuring safe and compliant use of AI tools, protecting AI features, and defending against AI‑powered attacks.
• Integrate secure development practices, including code review standards, dependency management, and automated security testing.
• Lead threat modeling, risk assessments, and maintain security policies for new products, vendors, and critical infrastructure.
• Direct incident response, update response plans, and manage disaster recovery and business continuity for revenue‑bearing platforms.
• Maintain the cybersecurity, data protection, technology, and AI risks in the Enterprise Risk Management portfolio.

Required profile

• Significant experience in security engineering or architecture, preferably in a SaaS environment.
• Deep knowledge of cloud infrastructure security and application security.
• Hands‑on understanding of AI and LLM‑related risks such as prompt injection and data leakage.
• Familiarity with ISO 27001, SOC 2, GDPR, and ISO 31000 risk frameworks.
• Proven ability to influence senior stakeholders and explain risk in business terms.
• Fluent English.

Required skills

• Cloud infrastructure security
• Application security
• AI security and LLM risk mitigation
• ISO 27001 compliance
• SOC 2 compliance
• GDPR security perspective
• ISO 31000 risk management

What we offer

• Fully remote work with optional office use in Milan, Bologna, or Port Louis.
• Annual company retreats in locations such as Venice, Athens, and Palermo.
• Flex budget up to €1,000 for personal benefits.
• Equipment supply scheme to set up your ideal workspace.
• Collaborative, multicultural team environment.