How your CV stacks up
Upload your CV to see how well it fits this job role
?%
GRC Lead Architect
We are currently seeking an experienced GRC Lead Architect to join a high-performing cloud security team. This role is responsible for defining and implementing cloud governance, risk, and compliance (GRC) architecture across enterprise cloud environments, ensuring security controls are embedded into cloud platforms and remain scalable, automated, and audit-ready.
Key Responsibilities
- Define and implement cloud governance, risk, and compliance architecture across enterprise cloud platforms.
- Translate regulatory, security, and business requirements into enforceable technical controls and cloud security policies.
- Develop and maintain governance frameworks using tools such as Wiz and GCP Organisation Policies.
- Lead security architecture reviews to ensure cloud solutions align with governance standards and security best practices.
- Map compliance frameworks (SOC 2, ISO 27001, NIST, and other regulatory standards) to technical controls and automated evidence collection.
- Design repeatable, scalable, and auditable governance processes that support cloud adoption and regulatory compliance.
- Partner with Security, Engineering, Risk, Compliance, and Platform teams to embed governance throughout the cloud lifecycle.
- Drive continuous improvements across cloud security posture, policy management, and compliance automation.
- Present governance strategies, risks, and recommendations to senior stakeholders and leadership.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required Experience
- Proven experience as a GRC Architect, Security Architect, or Cloud Security Architect.
- Strong knowledge of cloud governance, risk management, and compliance frameworks.
- Hands-on experience with Google Cloud Platform (GCP) and cloud security best practices.
- Experience implementing Wiz, GCP Organisation Policies, or similar cloud governance platforms.
- Strong understanding of SOC 2, ISO 27001, NIST, and other industry security frameworks.
- Experience conducting security architecture reviews and translating compliance requirements into technical controls.
- Knowledge of cloud identity, networking, infrastructure security, and policy-as-code principles.
- Excellent stakeholder management and communication skills.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Skills
- Experience with AWS and/or Azure cloud environments.
- Knowledge of Infrastructure as Code (Terraform), CI/CD pipelines, and cloud automation.
- Relevant certifications such as CISSP, CCSP, CRISC, Google Professional Cloud Architect, or similar.
- Experience working within highly regulated industries such as financial services, healthcare, or public sector.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location