Program Manager for Architecture and Security of Mission-Critical Systems

Harvey Nash; Brussel Hoofdstad; On-site; EUR 90,000 - 130,000; Full time

Job summary

Harvey Nash seeks a Program Manager to define, design, and validate target architectures for mission-critical systems across IT, OT, Cloud, and railway environments.

You will integrate Cyber Resilience by Design, Security by Design, Zero Trust, and Operational Resilience into strategic projects and programs, while conducting risk analyses and ensuring regulatory compliance.

Qualifications

• Dutch or French language proficiency (C1).
• English proficiency (minimum B2).
• Expertise in IT/OT/Railway cybersecurity and secure architectures.
• Strong knowledge of Safety & Security by Design principles.
• Knowledge of standards and regulations such as NIS2, ISO 27001, IEC 62443, CIS, and NIST.
• Experience with risk analysis and vulnerability management.
• Strong understanding of cloud environments, networks, systems, OT environments, and critical infrastructure.
• Ability to assess technical solutions and architectures from a security perspective.

Responsibilities

• Define, design, and validate target architectures for mission-critical systems across IT, OT, Cloud, and railway environments.
• Ensure integration of Cyber Resilience by Design, Security by Design, Zero Trust, and Operational Resilience principles into strategic projects and programs.
• Conduct business impact assessments, risk analyses, and architecture studies to identify vulnerabilities and single points of failure.
• Ensure architectures and solutions comply with regulations, standards and frameworks including NIS2, CER, CRA, ISO 27001, ISO 22301, IEC 62443, EN 50701.
• Support project teams, architects, asset owners, and suppliers in defining and implementing architecture, security, availability, and resilience requirements.
• Assess technology solutions, proposed architectures, and suppliers from business criticality, cybersecurity, operational resilience, and lifecycle management perspectives.
• Ensure architecture alignment with client objectives, service continuity requirements, and defined criticality levels (Mission Critical, Business Critical, Business Essential, Business Support).
• Contribute to enterprise architecture governance, architecture reviews, decision-making committees, and ongoing cyber resilience maturity improvements.
• Promote standardization, simplification, and control of dependencies to strengthen robustness of critical services.
• Ensure traceability between business needs, capabilities, services, assets, security controls and regulatory requirements.

Job description

The Program Manager will be responsible for defining, designing, and validating target architectures for mission-critical systems, covering IT, OT, Cloud, and railway environments. The role ensures the integration of Cyber Resilience by Design, Security by Design, Zero Trust, and Operational Resilience principles across strategic projects and programs.

Key responsibilities include:

• Define, design, and validate target architectures for mission-critical systems across IT, OT, Cloud, and railway environments.
• Ensure the integration of Cyber Resilience by Design, Security by Design, Zero Trust, and Operational Resilience principles into strategic projects and programs.
• Conduct business impact assessments, risk analyses, and architecture studies to identify vulnerabilities, critical dependencies, and single points of failure.
• Ensure architectures and solutions comply with applicable regulations, standards, and frameworks including NIS2, CER, CRA, ISO 27001, ISO 22301, IEC 62443, and EN 50701.
• Support project teams, architects, asset owners, and suppliers in defining and implementing architecture, security, availability, and resilience requirements.
• Assess technology solutions, proposed architectures, and suppliers from the perspectives of business criticality, cybersecurity, operational resilience, and lifecycle management.
• Ensure architecture consistency with the client's strategic objectives, service continuity requirements, and defined criticality levels (Mission Critical, Business Critical, Business Essential, and Business Support).
• Contribute to enterprise architecture governance, architecture reviews, decision-making committees, and the continuous improvement of cyber resilience maturity.
• Promote standardization, simplification, and control of technological dependencies to strengthen the robustness and sustainability of critical services.
• Ensure traceability between business needs, business capabilities, services, assets, security controls and regulatory requirements..

Required Technical Skills

• Dutch or French language proficiency (C1 level).
• English proficiency (minimum B2 level: reading, writing, and understanding).
• Expertise in IT/OT/Railway cybersecurity and secure architectures.
• Strong knowledge of Safety & Security by Design principles.
• Knowledge of standards and regulations such as NIS2, ISO 27001, IEC 62443, CIS, and NIST.
• Experience with risk analysis and vulnerability management.
• Strong understanding of cloud environments, networks, systems, OT environments, and critical infrastructure.
• Ability to assess technical solutions and architectures from a security perspective.

Soft Skills

• Understanding of the client's environment, the IT landscape, and the strategic challenges related to the role.
• Ability to integrate effectively into existing teams and demonstrate values such as kindness, courage, positivity, and reliability.
• Strong presentation skills, professional attitude, respect for management, clear and effective communication, and commitment throughout the contract duration.