Security Architect

Keystone Solutions; Brussel Hoofdstad; Hybrid; EUR 85,000 - 125,000; Full time

Job summary

Keystone Solutions is seeking a deeply experienced Security Architect consultant to define and govern security architectures for a client’s NIS2 compliance and cybersecurity transformation. You will work on-site embedded with the client’s security, risk and architecture teams, supported by Keystone Solutions’ experts.

You will align architectural governance with IAM/PAM, PKI, and business continuity objectives while collaborating with stakeholders to ensure secure-by-design outcomes across

Qualifications

• Master degree in IT, information security or science in technology.
• Minimum 10 years of experience in cybersecurity, including security architecture and NIS2 projects.
• Minimum 1 year of risk assessment experience in the railway industry.
• Certifications: ISO 22301 Lead Implementer and ISO IEC 21500 Lead Implementer.
• Fluent English (C1) both spoken and written; French and Dutch (C1) as well.
• On-site presence required up to five days per week at client location.

Responsibilities

• Define, review and govern end-to-end security architectures enabling NIS2 compliance and cybersecurity transformation.
• Establish architectural principles, guardrails, and review solution designs against NIS2, ISO 27001 and related controls.
• Align security architecture with IAM, PAM, PKI, risk assessment outcomes and business continuity objectives.
• Provide governance oversight for security architecture decisions with traceability from risks to controls.
• Collaborate with cross-functional teams and stakeholders to validate requirements and ensure secure-by-design outcomes.

Skills

Security architecture

NIS2 compliance

IAM & PAM

PKI design

Risk assessment

Business continuity

Stakeholder communication

Education

Master degree in IT or information security

Job description

Mission Overview:

Join Keystone Solutions as a Security Architect consultant to define, review and govern security architectures for a client’s NIS2 compliance and broader cybersecurity transformation. You will operate as a Keystone Solutions consultant, working closely with the client’s stakeholders to design and oversee robust, compliant security architectures that meet stringent regulatory and operational requirements.

Consultancy Nature of Work:

This is a consultancy mission delivered by Keystone Solutions. You will primarily work on site at the client’s location, embedded with their security, risk and architecture teams, and supported by Keystone Solutions’ experts, methods and community. You will represent Keystone Solutions at the client, bringing best practices, objectivity and delivery rigor while adapting to the client’s context and priorities.

Key Responsibilities as a Keystone Solutions Consultant:

• Define, review and govern end to end security architectures that enable the client’s NIS2 compliance and cybersecurity transformation.
• Establish architectural principles and guardrails, and review solution designs against NIS2, ISO 27001 and related controls where applicable.
• Align security architecture with IAM and PAM strategies, PKI design, risk assessment outcomes and business continuity objectives.
• Provide governance oversight for security architecture decisions, ensuring traceability from risks and regulatory obligations to technical controls.
• Collaborate with cross functional teams and stakeholders to validate assumptions, clarify requirements and ensure secure-by-design outcomes.

Required Qualifications and Certifications:

• Master degree in IT, information security or science in technology.
• Minimum 10 years of experience in cybersecurity, including proven experience in security architecture, NIS2 compliance projects, IAM and PAM, PKI, risk assessment and business continuity.
• Minimum 1 year of experience in risk assessment in the railway industry.
• Certifications: ISO 22301 Lead Implementer and ISO IEC 21500 Lead Implementer.
• Fluent communication in English, spoken and written, at least level C1.
• Fluent communication in French and Dutch, spoken and written, at least level C1.
• On site presence: for this assignment, the client requires the contractor to agree to be present at the client office up to five days per week for the execution of the assignment. The required on site presence may vary and will be communicated by the client to the contractor during the course of the assignment.

Evaluation Criteria:

• Level of experience with cybersecurity frameworks, including CyFun, ISO 27001, NIST, IEC 62443, NIS2, GDPR and CIS Controls, based on number of projects and role.
• Experience in security assessments including Business Impact Analysis, Threat modelling, Risk assessment and Gap analysis, considering scope, role and frequency.
• Breadth of technical experience across domains, such as network, cloud, ICAM, cryptography, monitoring and AI security, based on number of domains covered and project context.
• Proven experience reviewing procurement documentation, including RFI, RFQ and RFP, and conducting Third Party Security Assessments, based on number of reviews and assessments performed, role, scope and complexity.
• Proven experience with Jira administration, workflow automation and dashboarding, based on level of administration, automation complexity and dashboarding scope.
• Demonstrated experience in stakeholder communication, including type of stakeholders, level, context and deliverables.
• Experience in analysis and improvement initiatives, with examples of assessments, recommendations and outcomes.
• Degree of autonomy and responsibility in previous roles, for example lead versus support and decision making scope.
• Experience working in multi stakeholder environments, including number of teams and collaboration context.

Dynamic Projects:

As a Keystone Solutions consultant, you will tackle diverse challenges across multiple client engagements over time. You will gain exposure to complex environments, from safety critical operational technology to cloud native platforms, and apply your architecture expertise where it has the greatest impact.

Turbo-Charged Learning and Development:

Keystone Solutions invests in your growth with mentorship, peer communities, certification support and access to best practice accelerators. You will continuously sharpen your skills in NIS2, security architecture, IAM and PAM, PKI, risk management and resilience, supported by seasoned consultants.

Ambition Skyrocketing within a Consultancy Framework:

Our consultancy model empowers you to take on increasing responsibility, from leading architecture workstreams to coaching teams and shaping security roadmaps. Varied client contexts accelerate your progression and broaden your decision making scope.

Keystone Solutions’ Values in Action:

Being a K Stone means delivering with integrity, craftsmanship, teamwork and client centricity. You will bring these values to every engagement, building trust, embedding security by design and leaving the client stronger and more resilient.

Role-Specific Consultancy Advantages:

As a Security Architect, you will apply your expertise across identity, cryptography, monitoring and resilience domains while aligning with industry regulations like NIS2 and sector specific risk profiles, including railway. You will translate regulatory and risk requirements into pragmatic architectures that work at scale in real world client environments.