Information Security Architect (IT/OT)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Rotterdam, Netherlands; hybrid working with 40% in the office, 40% from home, and 20% flexible. With manager approval, work abroad in approved countries for up to 3 weeks per year, with a maximum of 2 consecutive weeks.
Gross annual salary: €82,000–€110,000, including FlexBudget and 8% holiday allowance; a bonus or collective profit sharing may apply depending on the role.
Company
is a sustainable energy company working toward climate neutrality by 2035 and operating critical energy infrastructure across IT, OT, smart grid technology, cloud platforms, and real-time trading systems.
What you will do
- Define and own enterprise security principles, standards, reference architectures, design patterns, and target-state architecture across IT, OT, cloud, applications, and supplier ecosystems.
- Lead security architecture for strategic programmes, cloud migrations, platform initiatives, and major technology changes, including reviews throughout the project lifecycle.
- Establish security architecture governance, review solution designs and exceptions, assess regulatory alignment, and provide risk-based recommendations and compensating controls.
- Define Azure, hybrid-cloud, SaaS, infrastructure, identity, zero-trust, network, endpoint, application, API, data, privacy-by-design, secure SDLC, and DevSecOps requirements.
- Develop OT/ICS security reference architectures, support industrial control system and critical infrastructure security, and assess vendor compliance with OT requirements.
- Define third-party and supply-chain security requirements, identify architectural gaps and technical debt, and contribute to multi-year security roadmaps and capability development.
Requirements
- Minimum 7 years of experience in cybersecurity, information security, security engineering, or security architecture, including at least 3 years in a dedicated Security Architect, Lead Security Engineer, or Enterprise Security Architect role.
- Experience designing security architectures across complex enterprise environments covering IT, OT, cloud, applications, and supplier ecosystems.
- Experience supporting major transformation, cloud migration, modernisation, or critical infrastructure programmes.
- Ability to influence and challenge senior business and technology stakeholders and communicate with CISOs, platform engineers, and operations teams.
- Knowledge of enterprise security architecture, security-by-design, network, endpoint, infrastructure and platform security, IAM, zero-trust, application and API security, secure SDLC, DevSecOps, data security, encryption, privacy-by-design, vulnerability management, monitoring, detection, business continuity, cyber resilience, and risk management.
- Primarily Microsoft Azure cloud security knowledge; AWS and hybrid-cloud experience is valued.
- Knowledge of third-party and supply-chain security and OT/ICS security architecture.
- Knowledge of ISO/IEC 27001, ISO/IEC 27002, NIST Cybersecurity Framework, CIS Controls, NIS2, applicable national cybersecurity legislation, GDPR, and DORA where applicable.
- Ability to establish security architecture governance and frameworks from zero in an organisation without an existing Security Architect or enterprise architecture function.
Nice to have
- ISA/IEC 62443 knowledge or experience.
- CISSP, SABSA, TOGAF, CISM, CCSP, Microsoft Azure security or solutions architecture, GIAC, or ISO 27001 Lead Implementer or Lead Auditor certification.
- AWS and hybrid-cloud experience.
Culture & Benefits
- Senior individual contributor role in the CISO Office within the Digital & Tech domain, embedded in the Security Architecture & Engineering team.
- Direct collaboration with enterprise architects, engineering leads, programme managers, and senior business stakeholders across strategic and technical levels.
- Hybrid working from home, the Rotterdam office, or abroad within approved-country and time limits.
- FlexBudget can be paid out, used for additional holiday days, or saved.
- Personal and professional development support, plus 8% holiday allowance and potential bonus or collective profit sharing.
Hiring process
- Apply directly through the Careers Portal; applications by email or LinkedIn are not processed.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →