Cyber Security Architect (IT/OT)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Hybrid working model based in Rotterdam, Netherlands; 40% office, 40% home, and 20% flexible work. Working abroad is allowed with manager approval for up to 3 weeks per year, with a maximum of 2 consecutive weeks.
Gross annual salary: €82,000–€110,000, including FlexBudget and an 8% holiday allowance; a bonus or collective profit sharing may apply depending on the role.
Company
is a sustainable energy company pursuing climate neutrality by 2035 and operating critical energy infrastructure across IT, OT, smart grids, cloud platforms, and real-time trading systems.
What you will do
- Establish ’s security architecture function, principles, standards, reference architectures, design patterns, and target-state roadmap from scratch.
- Define and review security architectures across enterprise IT, OT, cloud, applications, infrastructure, data, and supplier ecosystems.
- Lead security architecture for strategic programmes, cloud migrations, platform initiatives, and major technology changes.
- Operate security governance and review processes, assess exceptions and risks, and provide actionable recommendations to senior stakeholders.
- Develop Azure, hybrid cloud, zero-trust, application security, API security, DevSecOps, privacy-by-design, and OT/ICS security patterns.
- Support third-party and supply-chain security assessments, technical risk evaluation, remediation, resilience, and continuous improvement.
Requirements
- Minimum 7 years of experience in cybersecurity, information security, security engineering, or security architecture, including minimum 3 years as a Security Architect, Lead Security Engineer, or Enterprise Security Architect.
- Experience designing security architectures across complex enterprise environments covering IT, OT, cloud, applications, and supplier ecosystems.
- Experience supporting major transformation, cloud migration, modernisation, or critical infrastructure programmes.
- Ability to influence and challenge senior business and technology stakeholders while balancing technical rigour with business pragmatism.
- Knowledge of enterprise security architecture, security-by-design, network, endpoint, infrastructure, platform, application, API, data, privacy, vulnerability, monitoring, detection, continuity, resilience, and risk management.
- Cloud security knowledge, primarily Microsoft Azure; AWS and hybrid cloud experience is valued.
- Knowledge of identity and access management, zero-trust architecture, secure SDLC, DevSecOps, encryption, data classification, and third-party security.
- Knowledge of OT/ICS security architecture and ISA/IEC 62443, with understanding of safety, resilience, and operational availability constraints.
- Knowledge of ISO/IEC 27001, ISO/IEC 27002, NIST Cybersecurity Framework, CIS Controls, NIS2, applicable national cybersecurity legislation, GDPR, and DORA where applicable.
Nice to have
- Certifications such as CISSP, SABSA, TOGAF, CISM, CCSP, Microsoft Azure security or solutions architecture certifications, GIAC certifications, or ISO 27001 Lead Implementer or Lead Auditor.
- ISA/IEC 62443 experience or certification.
- AWS and hybrid cloud experience.
Culture & Benefits
- Senior individual-contributor role within the CISO Office and Security Architecture & Engineering team, with strategic and technical influence across the full technology estate.
- FlexBudget can be paid out, used to purchase additional holiday days, or saved.
- Personal and professional development support.
- Hybrid work across home, office, and flexible locations, with approved international work for up to 3 weeks per year.
- Annual holiday allowance of 8%, with a possible bonus or collective profit sharing depending on the role.
Hiring process
- Apply directly through the Careers Portal; applications submitted by email or LinkedIn will not be processed.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →