Security Architect (NIS2)

Location: Brussels, Belgium. On-site presence at the client office may be required up to five days per week, with the exact presence varying during the assignment.

Company

hirify.global delivers cybersecurity consultancy missions, supporting clients with security architecture, regulatory compliance, and transformation expertise.

What you will do

• Define, review, and govern end-to-end security architectures supporting NIS2 compliance and cybersecurity transformation.
• Establish architectural principles and guardrails, and review solution designs against NIS2, ISO 27001, and applicable controls.
• Align security architecture with IAM and PAM strategies, PKI design, risk assessment outcomes, and business continuity objectives.
• Provide governance oversight and traceability from risks and regulatory obligations to technical controls.
• Collaborate with security, risk, architecture, and cross-functional stakeholders to validate requirements and secure-by-design outcomes.
• Contribute to varied client engagements across safety-critical operational technology and cloud-native environments.

Requirements

• Master’s degree in IT, information security, or science in technology.
• At least 10 years of cybersecurity experience, including security architecture, NIS2 compliance projects, IAM and PAM, PKI, risk assessment, and business continuity.
• At least 1 year of risk assessment experience in the railway industry.
• ISO 22301 Lead Implementer and ISO IEC 21500 Lead Implementer certifications.
• English communication at C1 level or higher, spoken and written.
• French and Dutch communication at C1 level or higher, spoken and written.
• Experience with cybersecurity frameworks including CyFun, ISO 27001, NIST, IEC 62443, NIS2, GDPR, and CIS Controls.
• Experience with Business Impact Analysis, threat modelling, risk assessment, and gap analysis.
• Technical experience across network, cloud, ICAM, cryptography, monitoring, and AI security domains.
• Experience reviewing RFI, RFQ, and RFP procurement documentation and conducting third-party security assessments.
• Experience with Jira administration, workflow automation, and dashboarding.
• Stakeholder communication, analysis and improvement initiatives, autonomous decision-making, and collaboration in multi-stakeholder environments.
• Agreement to work on site at the client office up to five days per week when required by the assignment.

Culture & Benefits

• Consultancy work across multiple client engagements and complex operational technology and cloud-native environments.
• Mentorship, peer communities, certification support, and access to best-practice accelerators.
• Opportunities to lead architecture workstreams, coach teams, and shape security roadmaps.
• Work grounded in integrity, craftsmanship, teamwork, client centricity, and security by design.
• Support from hirify.global experts, methods, and consultant community.

Hiring process

• Apply through the hirify.global Career Portal.