Security Architect

Peoplement P/S; Hørsholm Kommune; On-site; DKK 1,100,000 - 1,400,000; Full time

Job summary

NACOS Marine is seeking a broad system architect with strong network understanding and practical security experience to shape the security of automation and navigation systems on ships worldwide. You will translate security requirements into architecture, guide developers, and contribute to pre-sales dialogues, supported by external cybersecurity consultants, driving a culture of secure-by-design.

As the first dedicated security architect in R&D, you will influence decisions and help build a

Qualifications

• Substantial senior-level IT experience with an architectural mindset.
• Experience across disciplines and a whole-system mindset.
• Background in regulated environments such as medtech, aviation, defence, banking or consultancy.
• Fluent in written and spoken English.
• Able to obtain NATO security clearance.

Responsibilities

• Own the security architecture of automation at NACOS Marine.
• Own security requirements from standards and customers, and bring them into the development process.
• Work closely with developers.
• Develop security roadmaps.
• Propose and review architecture designs.
• Drive a decision on network segmentation between automation and navigation.
• Follow up on vulnerabilities across the product line.
• Help build security competence and mindset in‑house, including upskilling colleagues.
• Take part in pre‑sales and customer dialogue on security matters.

Skills

Network knowledge

Security architecture

C# or C++

Windows/Linux

English fluency

Tools

PowerShell

Bash

Ansible

Terraform

Job description

NACOS Marine is a globally integrated group of companies at the forefront of maritime automation, navigation, and control systems. Building on decades of expertise and a heritage of trusted solutions. NACOS Marine continues to pioneer technologies that set the standard for safer, smarter, and more efficient ship operations worldwide.

With over 500 employees worldwide and a strong presence in Denmark through NACOS Lyngsø Marine A/S, the company combines decades of experience with renewed investment and strategic focus.

Based in Hørsholm and employing approximately 80 specialists, NACOS Lyngsø Marine plays a central role in developing future‑ready solutions for safer and smarter ship operations.

About security at NACOS Marine

NACOS Marine's systems are type‑approved at Security Level 1 (IEC 62443-3-3) today and must reach Security Level 3, a significant step requiring major changes, such as authenticating every connection and centralising certain functions, while key architectural decisions remain open.

In maritime systems, availability and safety come first, so security must never stop a system or cause it to react incorrectly, especially in a world where systems stay in service for 20–30 years and cannot simply be patched, as ships are at sea and changes may require re‑approval. Many maritime protocols were not designed for cybersecurity, and remote service access creates significant exposure. System architecture is therefore key to addressing these risks through network segmentation, secure configurations, monitoring and safe updates. Network segmentation between automation and navigation systems, compliance with EU cybersecurity rules and the required security documentation are key for NACOS Marine.

The role

NACOS Marine needs a broad system architect with strong network understanding and practical security experience, rather than a deep security specialist. What matters most is your ability to understand how the different parts fit together and translate security requirements into architecture and clear specifications developers can build from. You help establish a more structured development process than today’s. You start with the whole system: where data originates, how it flows and how it is protected. By considering requirements together, you identify solutions that address several needs at once and give developers clear direction before they code.

You are comfortable stepping in to advise on technical security, compliance matters, and presales activities. You will deepen your security expertise over time, supported by our external cybersecurity consultants.

Responsibilities

• Own the security architecture of automation at NACOS Marine.
• Own security requirements from standards and customers, and bring them into the development process.
• Work closely with developers.
• Develop security roadmaps.
• Propose and review architecture designs.
• Drive a decision on network segmentation between automation and navigation.
• Follow up on vulnerabilities across the product line.
• Help build security competence and mindset in‑house, including upskilling colleagues.
• Take part in pre‑sales and customer dialogue on security matters.

Success factors

• Become the developers’ go‑to person for turning security requirements into architectural solutions.
• Identify fundamental design weaknesses in the secrets solution and agree on a fix with an agreed plan for fixing it with the developers.
• Architecture defined for all centralised IEC 62443-3-3 features: backup, secrets management, monitoring and asset inventory.
• Feature improvement roadmap and timeline agreed with the R&D lead.
• Ensured a new high‑priority project meets security standards and sound architectural principles.
• Documented and clearly explained to customers how the solution meets security requirements.
• Broad understanding of software development, system design and infrastructure, including commercial off‑the‑shelf (COTS) products.
• Strong network knowledge, complementing the existing architects’ expertise.
• Understanding of Windows, Linux, code structure and data flows. C# or C++ is an advantage, as is experience with PowerShell, Bash, Ansible or Terraform.
• Hands‑on security experience beyond firewall configuration and network design.
• Solid understanding of relevant security standards, such as IEC 62443-3-3, IEC 61162-460 and IACS UR E22, E26 and E27. Experience with standards in other sectors, such as medical or finance, is equally relevant.
• Senior and used to leading the way, pushing for change
• Analytical and structured, with a top‑down approach to problem‑solving.
• Pragmatic and confident in challenging others, including sales, with clear boundaries.
• Builds momentum through dialogue with experienced colleagues across Denmark, Germany and Norway.
• Brings fresh perspectives while building on existing practices.
• Motivated to drive cultural change through steady, daily progress.
• Applies standards with sound judgement.
• Explains complex technical topics and consequences clearly to technical and

non‑technical stakeholders.

Your profile

• Substantial senior‑level IT experience, with an architectural mindset and practical architecture and security experience. You do not need to be a deep security expert today.
• Experience across disciplines and a whole‑system mindset: understanding how software is built and how infrastructure enables it to be deployed, run and secured.
• A background in both infrastructure and development is a strong advantage.
• Background in a regulated environment where standards underpin system design and development, such as medtech, aviation, defence, banking or consultancy.
• Maritime or OT experience is not required.
• Fluent in written and spoken English.
• Able to obtain NATO security clearance.

Youwill help define how cybersecurity is built into systems used on cruise and navy ships worldwide, working with critical OT infrastructure. As the first dedicated security architect in R&D, you will have real influence and a short path from idea to decision.

NACOS Marine values initiative, open dialogue and learning from mistakes – and gives you the trust to take responsibility and shape solutions together.