DSPM Lead: Data Security & Governance Architect

Grant Thornton International; Województwo wielkopolskie; Hybrid; PLN 260,000 - 380,000; Full time

Benefits offered by this job

Hybrid working model (2 days in office

Private medical care

MultiSport and benefits platform

Job summary

Grant Thornton International seeks a Data Security Posture Management Lead to design and run DSPM capabilities across cloud, hybrid, and on‑prem environments. You will drive sensitive data discovery, classification, and remediation with a focus on regulatory compliance and data‑centric security strategies.

You will collaborate with Information Security, Data Governance, Risk & Compliance, and GTech to deliver continuous visibility, policy alignment, and executive dashboards.

Qualifications

• Bachelor’s degree in a relevant field.
• 5+ years of experience in Data Management, Data/Information Governance, or Compliance.
• Hands-on DSPM experience across cloud, hybrid, and on‑prem environments.
• Knowledge of GDPR, ISO 27001, NIST, HIPAA, SOX.
• Experience with cloud security architecture and IAM controls.

Responsibilities

• Lead automated discovery and classification of sensitive data across cloud, SaaS, databases, and on‑prem systems.
• Enforce data access governance and least-privilege across environments.
• Collaborate to implement encryption, masking, tokenization, and DLP controls.
• Provide monitoring and reporting of data security posture and risk metrics.
• Align DSPM practices with Data Lifecycle Management and Governance programs.

Skills

DSPM

Data discovery

Classification

Least privilege

Auditing dashboards

Polish & English fluency

Education

Bachelor’s degree in Information Management / Computer Science / related field

Tools

DSPM platforms (Veronis, Proofpoint, Cyberhaven)

Azure / AWS / SaaS security

Job description

Grant Thornton International seeks a Data Security Posture Management Lead to design and run DSPM capabilities across cloud, hybrid, and on‑prem environments. You will drive sensitive data discovery, classification, and remediation with a focus on regulatory compliance and data‑centric security strategies.

You will collaborate with Information Security, Data Governance, Risk & Compliance, and GTech to deliver continuous visibility, policy alignment, and executive dashboards.