We’ve signed up to an ambitious journey. Join us!
As Arrive, we guide customers and communities towards brighter futures and more livable cities, it isn’t a challenge just anyone could take on. Luckily, we have something to help us make it happen. Our people and our values. We Arrive Curious, Focused and Together. Just as our entire brand is inspired by the North Star, the shining light leading travelers to their destinations since time began, our values guide us. They help us be at our best. For our customers. For the cities and communities we serve. For ourselves. As a global team, we are transforming urban mobility. Let’s grow better, together.
Role summary
The Lead Cloud Security Architect is a senior, influential role responsible for orchestrating and leading Arrive’s global cloud security strategy. As a core member of the Security Architecture & Engineering team, you will act as the central driver for how we design, build, and govern our multi-cloud infrastructure across the company.
Your primary focus is to unite our efforts by creating, standardizing, and scaling our cloud security posture globally. This involves building upon existing expertise and forging a powerful partnership with the Infrastructure and Platform Engineering teams to ensure our next generation of products is built on a resilient, secure-by-design foundation.
Your mission
To elevate and unify our cloud security program at Arrive. Your mission is to be a force-multiplier for our infrastructure and engineering teams, fostering a secure cloud culture built on clear global standards, strong partnerships, and modern automation. You will ensure that cloud security is a shared goal and a collective achievement.
Key responsibilities
Cloud Security Strategy & Standards
Champion and orchestrate the definition of Arrive’s cloud security architecture, from identity boundaries to network segmentation, in partnership with Data & Analytics teams, Engineering, and IT.
Develop and maintain a comprehensive set of global security standards, baselines, and guidelines for cloud-native services, container security, and serverless computing.
Create and champion the strategy for cloud security tooling including CSPM (Cloud Security Posture Management) and CWPP (Cloud Workload Protection) - ensuring these platforms are architected for seamless SecOps integration, automated alerting, and streamlined incident response workflows.
Define and manage cloud security standards for Mergers & Acquisitions, establishing requirements for the secure migration and integration of acquired cloud environments.
Own and evolve the cloud security reference architecture, providing a clear 'north star' for all engineering teams to follow.
Technical Partnership & Enablement
Operating 'Together,' you will act as strategic partner for the Infrastructure, SecOps, and engineering teams, orchestrating a cohesive security vision that spans the entire cloud and AI-first engineering landscape.
Act as a lead security consultant and strategic partner for infrastructure, SecOps, and Engineering teams - providing expert guidance on secure cloud design patterns and landing zone configurations.
Forge a dynamic partnership with the Security Platform team: co-design the infrastructure-as-code (IaC) security roadmap and introduce new architectural patterns where needed.
Lead security architecture reviews and threat modeling sessions for complex cloud migrations and high-risk infrastructure changes.
Act as a senior mentor and advocate for cloud security champions across the organization, helping to grow our internal technical talent.
Emerging Threats & Innovation
Stay ‘Curious’ at the forefront of emerging cloud-based threats, with a particular focus on the risks associated with multi-cloud sprawl and shadow IT.
Drive innovation in security practices by seeking opportunities to automate and improve the effectiveness of our cloud detection and response capabilities.
Lead the strategy for leveraging AI to mature our cloud governance.
What you bring
Deep Cloud Expertise: Extensive, hands-on experience in cloud security, with mastery of identity management, network security, and data protection in the cloud.
A Builder of Standards: Proven experience creating and rolling out security standards and patterns in a complex, multi-cloud environment.
A Unifier and Partner: Exceptional ability to foster collaboration and influence infrastructure teams without direct authority; you build bridges and break down silos.
Strategic Thinker: Ability to define a long-term strategy for cloud security and translate it into an actionable, scalable plan.
Modern Technologist: Strong understanding of cloud-native architectures, containerization, and Infrastructure as Code.
An Automation- and AI-First Mindset: You believe that manual processes are a liability. You constantly seek opportunities to codify standards, automate controls, and embed security directly into the engineering workflow, reducing friction and improving velocity.
Qualifications
10+ years of experience in technology, with at least 7 years in a dedicated cloud security or infrastructure security role.
Demonstrated experience designing and implementing secure landing zones in a multi-cloud environment (GCP, AWS).
Hands-on experience with the architecture and strategy of cloud security tools (e.g.,Wiz, Orca).
A Bachelor’s degree in a relevant field or equivalent professional experience.
Why join Arrive
Be the global leader and define the future of cloud security at a mission-driven, transformative company.
Operate as a senior expert within a strategic architecture team, with a broad mandate to influence security across all of Arrive’s infrastructure.
Work at the cutting edge of securing technology, including multi-cloud and AI-driven mobility solutions.
This is a hybrid role. We welcome candidates based in Sweden, United Kingdom or Poland.
