Security Services Architect Consultant

Norsk Hydro; São Paulo; Presencial; BRL 80.000 - 150.000; Tempo integral

Resumo da oferta

An innovative company is seeking a skilled Security Services Architect to lead its security architecture discipline. This role involves translating cyber risks into actionable security requirements, guiding the implementation of security controls, and collaborating with a diverse network of stakeholders. You will drive the adoption of cyber security frameworks and develop security standards that align with IT strategies. If you are strategic, results-oriented, and possess strong leadership skills, this is an exciting opportunity to make a significant impact in a dynamic environment.

Qualificações

• Strong experience with technology and IT.
• Specialization in information security, including software and/or infrastructure.

Responsabilidades

• Own and ensure operational effectiveness of the Security Architecture discipline.
• Lead the development of security reference architecture and controls.

Conhecimentos

IT Security

Leadership

Analytical Skills

Cloud Security

Communication Skills

Formação académica

Degree in IT-related fields

Ferramentas

ISO27001

NIST

TOGAF

Descrição da oferta de emprego

Security Services Architect Consultant

HydroExtrusions is a world-leading aluminum extrusion business with approximately 100 production sites in 40 countries, employing 20,000 people. Through our unique combination of local expertise, a global network, and unmatched R&D capabilities, we offer everything from standard profiles to advanced development and manufacturing for many key industries.

Hydro is currently strengthening its organization in the area of Cyber Security Services. As a result, Cyber Security Services/Security Engineering is seeking a proficient Security Services Architect to lead the recently formalized security architecture discipline for the Hydro group.

This position will be responsible for implementing Security Architecture to plan and design security in a consistent and coherent manner. The role involves translating cyber risks into actionable security requirements, designing, and guiding the implementation of security controls. Collaboration will be required with a wide network of stakeholders, including enterprise domain architects, cyber security professionals, the CISO, security solution architects, security engineers, SOC teams, risk managers, and application and product owners. The position reports to the Manager of Security Engineering and is part of the Cyber Security Services team.

Responsibilities:

• Own and ensure operational effectiveness of the Security Architecture discipline;
• Lead the development of security reference architecture, methodology, models, and controls in alignment with requirements from architecture teams, technology teams, and the CISO organization;
• Drive the adoption and implementation of relevant cyber security frameworks and standards;
• Translate information security policies into technical security control frameworks and blueprints, and socialize these across the organization;
• Serve as a trusted advisor and security representative on architecture boards and within the cyber security team;
• Develop security standards and promote improvements based on IT/security strategy, operational developments, project feedback, and other sources;
• Oversee the entire lifecycle of security architectures and solutions, from conceptual and logical design to physical deployment and operational management.

Qualifications:

• Degree in IT-related fields;
• Specialization in information security, including software and/or infrastructure, encompassing architecture and operations (e.g., Log Management, Vulnerability Management, Firewalls);

Requirements:

• Strong experience with technology and IT;
• Knowledge or experience with OT/ICS security is desirable;
• Experience working in large international environments and leading virtual teams;
• Excellent verbal and written English skills;
• Strategic, result-oriented, with an analytical mindset;
• Leadership, facilitation, and orchestration skills;
• Familiarity with agile digital product development approaches;
• Experience in security audits;
• Proven knowledge of ISO security standards (ISO27001, ISO22301, or equivalent);
• Familiarity with international security frameworks and methodologies (NIST, SABSA, TOGAF, or equivalent);
• Experience with cloud security (e.g., AWS or Azure certifications);
• Track record of implementing security policies and controls across departments and hierarchy levels;
• Ability to communicate effectively with both technical and non-technical stakeholders.

All opportunities are open to persons with disabilities (PWD) and those rehabilitated by INSS.

Department: GBS IT Security Operations & Engineering