Cybersecurity Architect

SSAB; Helsinki; On-site; EUR 120,000 - 190,000; Full time

Job summary

SSAB is seeking an experienced Cybersecurity Architect to define and evolve our cybersecurity architecture, standards and security requirements. You will work with technology teams, suppliers, and major transformation projects to embed security by design and enable secure cloud adoption and OT modernization.

The role reports to the Group CISO and can be based in Stockholm or Helsinki. You will perform hands-on design reviews, threat modelling, and provide security guidance across divisions to

Qualifications

• Extensive experience in cybersecurity architecture, cloud security, infrastructure architecture, or software/security engineering.
• Proven enterprise security architecture design in complex organizations with hands-on implementation skills.
• Strong Azure and hybrid-cloud security architecture expertise (Azure Solutions Architect Expert or equivalent advantageous).
• Experience with application security, identity and access management, network security, and infrastructure security.
• Knowledge of AI/ML tools and their security applications.
• Experience in architecture reviews, threat modelling, and security risk assessments.
• Certifications such as CISSP, GICSP or SABSA/TOGAF; IEC62443 knowledge for industrial manufacturing contexts.
• Ability to translate technical security requirements into actionable guidance and build stakeholder relationships.
• Fluency in English; Nordic language skills are advantageous.

Responsibilities

• Define and maintain SSAB's cybersecurity architecture strategy and target state.
• Establish security standards, reference architectures, and Secure-by-Design principles across programs.
• Review cloud, application, identity, network, infrastructure, and OT architectures for security alignment.
• Drive cybersecurity architecture assessments, threat modelling, and design reviews.
• Identify gaps and advise teams on remediation of technical debt and vulnerabilities.
• Develop cybersecurity requirements for secure software development and DevSecOps practices.
• Support Zero Trust, identity governance, cloud security, and emerging tech initiatives.
• Collaborate with suppliers and engineering teams to implement security controls.

Job description

We are looking for an experienced Cybersecurity Architect to help shape and secure SSAB's digital future. In this strategic role, you will define and evolve our cybersecurity architecture, standards, and security requirements working closely with technology teams, suppliers, and supporting our key transformation initiatives and projects.

Your mission is to ensure cybersecurity is built into solutions from the start, enabling secure cloud adoption, business transformation, OT modernization, and responsible use of emerging technologies.

This role combines long-term architectural leadership with hands‑on design reviews, threat modelling, and security guidance. You will help teams across all our divisions make better security decisions, reduce technical security debt, and establish a scalable security architecture that supports SSAB's business objectives.

This role reports to our Group CISO, Markus Lalla and can be based in Stockholm or Helsinki.

Main Responsibilities

• Define and maintain SSAB's cybersecurity architecture strategy and target-state
• Establish security standards, reference architectures, and ensure Secure-by-Design principles are embedded into all business transformation programs and technology initiatives
• Review and provide guidance on cloud, application, identity, network, infrastructure, and OT architectures
• Drive cyersecurity architecture assessments, threat modelling, and design reviews
• Identify architectural cybersecurity gaps and advice teams in remediating technical debt and vulnerabilities
• Develop cybersecurity requirements for secure software development and DevSecOps practices
• Support Zero Trust, identity governance, cloud security, and emerging technology initiatives
• Collaborate with suppliers, architects, and engineering teams to ensure effective implementation of security controls across the organization

About You

• You have extensive experience (typically 10+ years) in cybersecurity architecture, cloud security, infrastructure architecture, or software/security engineering
• You have proven experience designing enterprise security architecture in complex organizations and hands‑on implementation skills integrating cybersecurity systems such as vulnerability scanning tools or a SOAR platform, as an example
• You have strong expertise in Azure and hybrid-cloud security architecture where Azure Solutions Architect Expert or equivalent cloud architecture certification is seen as an advantage
• You have wide experience with application security, identity and access management, network security, and infrastructure security
• You have good understanding of AI and ML tools and their applications in security solutions
• You are experienced in performing architecture reviews, threat modelling, and security risk assessments
• You hold certifications such as CISSP, GICSP or those within SABSA and TOGAF. The knowledge base of the IEC62443 umbrella is highly appreciated in order to efficiently operate in industrial manufacturing and supplier ecosystems.
• You can translate technical security requirements into clear and actionable guidance for architects, developers, and project teams, while building strong stakeholder relationships that drive adoption of cybersecurity practices
• You are fluent in English, both written and spoken. Proficiency in one or more Nordic languages is considered an advantage

Recruitment Process

• Digital Interview
• Meet the Hiring Manager
• Case Assignment
• Meet the Team and a few key stakeholders
• Pre-Offer Checks (including health check for Finland based candidates)

Got Questions? Please Contact:

Julia Källmar, Group Talent Acquisition Partner, [e-mail]