Security Architect

Stott and May; Brussel Hoofdstad; Sur place; EUR 90 000 - 150 000; Temps partiel

Résumé du poste

Stott and May is assisting an EU institution in Brussels in finding a Senior Cybersecurity Architect to design, maintain and improve its security architecture. The role covers driving compliance with internal security policy and securing the move to cloud and modern architectures.

You will lead security modelling, coordinate secure development and maintenance, perform risk analyses and work with cross-functional teams on cloud migration, vulnerability management and security-by-design

Qualifications

• 12+ years of professional experience in cybersecurity / security architecture
• Experience in risk analysis using methodologies such as EBIOS or CRAMM
• Excellent communication and presentation skills; ability to present to Steering Committees

Responsabilités

• Create, maintain and continuously improve cybersecurity architectures, models, documentation and technical specifications
• Coordinate secure development, integration and maintenance of cybersecurity components
• Verify and assess security controls using dedicated security tools and platforms
• Ensure the overall security and resilience of IT systems and services
• Promote IT security with business stakeholders through risk analysis and BIA
• Collaborate with technical teams on security architecture, vulnerability scanning, code reviews and cryptographic solutions
• Implement security plans covering vulnerability management, training, log management and access policies
• Align with IT security policy and cloud-first and security-by-design strategies
• Address security aspects of cloud migration and moving to modern architectures

Formation

Bachelor’s, Master’s or PhD in Cybersecurity, IT, Computer Science, Engineering, Governance

Description du poste

Freelance | Long term | On-site Brussels |EU nationality required - for clearence purpose

About the role

Our client, an EU institution, is looking for a Senior Cybersecurity Architect to design, maintain and improve its security architecture. The role covers driving compliance with internal security policy and securing the move to cloud and modern architectures.

Responsibilities

• Create, maintain and continuously improve cybersecurity architectures, models, documentation and technical specifications
• Coordinate the secure development, integration and maintenance of cybersecurity components in line with security standards
• Verify and assess security controls using dedicated security tools and platforms
• Ensure the overall security and resilience of IT systems and services
• Promote IT security with business stakeholders through Business Impact Assessments and risk analysis
• Work with technical teams on security architecture, vulnerability scanning, code reviews, ethical hacking and cryptographic solutions
• Implement security plans covering vulnerability management, training, log management and access policies
• Ensure alignment with the organisation’s IT security policy and its wider cloud-first and security-by-design strategies
• Address the security aspects of cloud migration and the move to modern components and architectures

Requirements

• Bachelor’s, Master’s or PhD in Cybersecurity, IT, Computer Science, Engineering, Governance or a related field
• 12+ years of professional experience, including 6+ years in cybersecurity / security architecture roles
• Extensive security consulting experience, including risk analysis using methodologies such as EBIOS or CRAMM
• ISO/IEC 27001 & 27002 and BS 7799
• Defining and following up Security Programmes, Business Continuity Plans, Security Awareness, Vulnerability Management and Security Requirements
• Proven project management experience and leadership of cross-functional teams across support, development and operations
• Excellent communication and presentation skills, with confidence presenting to Steering Committees and senior management
• English and French at C1 level minimum (spoken and written)

Certifications

Mandatory:

• At least one security architecture certification, e.g. ISSAP, SABSA (SCF), GDSA, GCED, GCSA, SEC549
• At least one cybersecurity certification, e.g. CISSP, GSEC, CompTIA Security+, CSX-P
• Governance: CISM