Security and Compliance Specialist

Nextjob
Full-timeColombo, Sri Lanka

The Company

We are an award-winning software product engineering company that has delivered bespoke web, enterprise, mobile, and cloud solutions to clients around the world for over 25 years. The company has recently expanded into AI-driven innovation, offering AI development, consulting and implementation, data engineering and master data management, and cloud architecture alongside its core software development services. We are a Microsoft Silver Partner and AWS partner, ISO certified, and a SLASSCOM member, and in 2025 won gold at every major national technology award ceremony in Sri Lanka.

With long-standing partnerships spanning 5 to 15+ years with global clients across healthcare, logistics, and enterprise software, we combine deep technical expertise with a client-first approach — helping start-ups and enterprises alike scale through digital transformation. The company prides itself on dedication, continuous improvement, and adaptability, building teams and solutions that grow and evolve alongside its clients' changing needs.

Role Overview

Ensure the data/MDM solution is designed and delivered with appropriate security, privacy, audit and cross-border/residency controls.

Employment Details

  • Employment Type: Part Time External Consultancy
  • Work Arrangement: Hybrid
  • Working Hours: 4 Hours
  • Experience: Minimum 7+ years
  • Salary: LKR 400,000 per month
  • Communication: Strong English communication skills, both written and verbal (minimum 8/10 proficiency)

Key Responsibilities

  • Assess security/privacy requirements for source, Lakehouse, MDM and integrations.
  • Define IAM/RBAC/PIM and privileged-access requirements.
  • Review network isolation, encryption, secrets and audit logging.
  • Lead data-residency and cross-border processing assessment with business/DPO/legal stakeholders.
  • Support PII/sensitivity classification and data-minimization decisions.
  • Contribute to DPIA/security architecture reviews and risk treatment.
  • Validate logging/monitoring and incident-response integration.
  • Review third-party/product security considerations

Must-Have Experience & Skills

  • Strong Azure security architecture and IAM experience.
  • Enterprise data security / privacy experience.
  • Understanding of GDPR and multi-region data-transfer/residency considerations.
  • Security risk assessment and architecture review experience.
  • DPIA methodology and execution exposure.
  • Ability to work with DPO/legal/security stakeholders.

Preferred / Nice-to-Have

  • Purview information protection/catalog exposure.
  • Databricks security/governance.
  • Relevant security/cloud certifications

Apply for this job

Resume/CV*

Click or drag file to this area to upload your Resume

Please make sure to upload a PDF

First Name*
Last Name*
Email*
Phone Number*
The hiring team may use this number to contact you about this job.

By clicking 'Submit Application', you agree to receive job application updates from Nextjob via text and/or WhatsApp. Message frequency may vary. Reply STOP to unsubscribe at any time. Message & data rates may apply.