Strategic Security Architect & GRC Lead (Hybrid)

Onetowin; Brussel Hoofdstad; Hybride; EUR 90 000 - 120 000; Temps partiel

Résumé du poste

Onetowin seeks a Senior Security Officer to identify, analyze, and mitigate IT and cyber risks from design through execution, bridging complex architectures with GRC needs. The role demands collaboration with Architects and DevOps while maintaining strict regulatory alignment.

You will lead on-site workshops, assess critical projects, and drive remediation across the portfolio, delivering clarity to executives on risk and controls in a fast-moving environment.

Qualifications

• Availability to commit to a 3‑day work week with on-site presence for at least 2 days.
• Expert knowledge of Cyber frameworks (ISO 27001/27002/27005, NIST) and the NIS2 directive.
• Proven ability to apply OWASP Risk Rating Methodology and perform architecture reviews (Cloud/GCP).
• Hunter mentality to identify hidden risks by digging through technical docs.
• Fluency in English and ability to simplify security topics for non‑tech stakeholders.
• 5+ years in Cyber Security, specifically in a GRC or Security Architecture role.

Responsabilités

• Technical Risk Decomposition: deconstruct architectures and data flows to identify vulnerabilities using OWASP and ISO 27005.
• Cross-Functional Collaboration: partner with Architects and DevOps to integrate security without delaying delivery.
• Compliance Oversight: ensure adherence to GDPR, NIS2, and internal security policies throughout projects.
• Architecture Deep-Dives: analyze APIs and micro-services for OWASP Top 10 flaws and secure designs.
• Third-Party Security: conduct security reviews of external contracts and providers.
• On-site Stakeholder Engagement: lead workshops translating regulatory requirements into technical controls.
• Reporting: translate risks into actionable business insights for management.

Connaissances

3-day week

Cyber frameworks

Technical risk reviews

Analytical mindset

Clear communication

5+ years security

Description du poste

Onetowin seeks a Senior Security Officer to identify, analyze, and mitigate IT and cyber risks from design through execution, bridging complex architectures with GRC needs. The role demands collaboration with Architects and DevOps while maintaining strict regulatory alignment.

You will lead on-site workshops, assess critical projects, and drive remediation across the portfolio, delivering clarity to executives on risk and controls in a fast-moving environment.