Senior Security Architect

Cronos Europa; Brussel Hoofdstad; On-site; EUR 90,000 - 140,000; Full time

Job summary

Cronos Europa is seeking a Senior Cybersecurity Architect to design and oversee security architecture for EC information systems in Belgium. You will drive risk analyses, develop and maintain Security Plans, and coordinate secure development across teams.

The role requires expertise in vulnerability management, security controls verification, and strong communication with Steering Committees and senior management. English and French at C1, with a focus on Cloud First and Security by Design.

Qualifications

• Education level: Level 6 of the European Qualification Framework, typically a Bachelor's degree or higher.
• Experience in security consulting with risk analysis using EBIOS and CRAMM.
• Familiarity with ISO/IEC 27001 & 27002 and BS 7799.
• Ability to define and manage Security Programs, BC Plans, Security Awareness, Vulnerability Management, and Security Requirements.
• Strong management skills with proven project leadership across cross-functional teams.
• Excellent communication and presentation abilities with Steering Committees and senior management.
• English and French at C1 level or higher.

Responsibilities

• Create and continuously improve architectural models and documentation for cybersecurity.
• Coordinate secure development, integration, and maintenance of cybersecurity components.
• Verify cybersecurity controls using EC systems.
• Ensure the security of IT systems and develop Security Plans.
• Collaborate with stakeholders on IT security through risk analysis and BIA.
• Engage with technical teams to establish security architecture, perform vulnerability scans and code reviews.
• Implement actions from Security Plans to comply with EC Security Policy and Cloud/Design strategies.
• Align with IT Security Policy and broader EC strategies like Cloud First and Security by Design.
• Address security aspects of cloud transitions and modern component migrations.

Skills

Security architecture

Vulnerability management

Risk analysis

ISO/IEC 27001

Communication & presentation

Multilingual (English/French)

Project management

Security controls verification

Education

Bachelor's degree

Master's degree or PhD

Job description

European Institutions secure a wide portfolio of Information Systems, focusing on developing robust security plans, conducting risk assessments, and collaborating with technical teams on security architecture and vulnerability management.

The aim is to deliver modern and secure architecture, ensuring compliance with EC Security Policies while aligning with strategies such as Cloud First and Security by Design.

In this context, Cronos Europa is looking for a Senior Cybersecurity Architect.

Responsibilities:

• Create and continuously improve architectural models and develop appropriate architectural documentation and specifications related to the cybersecurity aspects of business systems.
• Coordinate secure development, integration, and maintenance of cybersecurity components in line with standards and related requirements.
• Verify cybersecurity controls using EC dedicated systems.
• Ensure the security of IT systems.
• Develop and maintain Security Plans.
• Collaborate with business stakeholders to promote IT security through Business Impact Assessments and Risk Analysis.
• Engage with technical teams to establish security architecture, conduct vulnerability scans, perform code reviews and ethical hacking, and implement cryptographic solutions.
• Implement the actions proposed in Security Plans to achieve compliance with the EC Security Policy, focusing on vulnerability scans, training programs, log management, and access policies.
• Ensure alignment with the IT Security Policy and security aspects of broader Commission strategies such as Dual Pillar, Cloud First, and Security by Design.
• Address security aspects associated with transitioning to cloud infrastructure and migrating to modern components and architectures.

Skills:

• Extensive experience in security consulting, including conducting risk analysis using methodologies such as EBIOS and CRAMM.
• Familiarity and experience with security frameworks such as ISO/IEC 27001 & 27002 and BS 7799.
• Proficiency in defining and following up on Security Programs, Business Continuity Plans, Security Awareness initiatives, Vulnerability Management, and specifying Security Requirements.
• Strong management skills with a proven track record in project management and leading cross-functional teams in system support, development, and operations.
• Exceptional communication and presentation abilities, with experience interacting with Steering Committees, Middle and Senior Management.
• Ability to understand, speak, and write English and French at least at C1 level.

Behavioral skills:

• High degree of discretion and integrity.
• Ability to integrate seamlessly into an international, multicultural environment with rapid self-starting capability.
• Expertise in working within multilingual settings and participating effectively in multilingual meetings.
• Ability to manage multiple large projects within a multicultural context.
• Skilled in establishing and nurturing trusting relationships with counterparts in partner organizations.
• Strong team player.

Profile:

• Level of education corresponding to Level 6 of the European Qualification Framework, typically corresponding to a Bachelor's degree or higher.
• Bachelor's degree of 3 years or more, Master's degree or Ph.D. in the specific areas defined for the profile or in other equivalent areas, subject to acceptance by the Contracting Authority.
• A qualification in a non-related area should be accompanied by the minimum required professional experience.