Information Security Architect

BlackFluoAI; France; Sur place; EUR 70 000 - 90 000; Plein temps

Résumé du poste

A cybersecurity firm in France seeks an experienced Information Security Architect. The role involves designing and governing secure architectures across IT and cloud environments, ensuring systems resilience against cyber threats. Candidates should have over 6 years in information security and expertise in frameworks such as TOGAF. Strong collaboration with IT, engineering, and compliance teams is essential. This position offers an opportunity to lead key architectural security initiatives.

Qualifications

• Proven experience in designing secure infrastructure and cloud architectures.
• Strong knowledge of enterprise architecture frameworks like TOGAF and SABSA.
• Ability to conduct risk assessments and threat modeling.

Responsabilités

• Lead the design and governance of secure architectures across IT and cloud environments.
• Define and maintain the enterprise security architecture framework.
• Collaborate with teams to implement secure practices in projects.

Connaissances

Information Security

Security Architecture

Risk Assessment

Cloud Security

Network Security

Formation

6+ years in information security

2+ years in security architecture

Outils

AWS

Azure

GCP

Description du poste

About the job Information Security Architect

Designing and governing secure digital infrastructure across enterprise systems and platforms.

Position Overview

We are looking for an experienced Information Security Architect to lead the design, development, and governance of secure architectures across IT and cloud environments. The role involves translating organizational risk and compliance requirements into technical security solutions, ensuring systems are resilient against evolving cyber threats while meeting regulatory obligations and business goals. You will collaborate with IT, engineering, compliance, and business teams to ensure a consistent and proactive approach to enterprise security architecture.

Key Responsibilities

Security Architecture & Design

• Define and maintain the enterprise security architecture framework, including principles, standards, and patterns
• Design secure infrastructure, network, cloud, application, and data architectures for internal and external services
• Ensure alignment of architecture with risk, privacy, compliance, and governance requirements (e.g., NIST CSF, ISO 27001, CIS Benchmarks)
• Develop threat models and security reference architectures for high-risk or critical platforms
• Assess new technologies and platforms for security implications and mitigation requirements

Governance & Compliance

• Support security architecture reviews and control validation across IT projects and DevSecOps pipelines
• Lead architecture-level security risk assessments and contribute to third‑party/vendor evaluations
• Work closely with legal and privacy teams to ensure technical controls align with global regulations (e.g., GDPR, HIPAA, PCI DSS)
• Participate in internal audits, compliance reviews, and architecture board activities

Collaboration & Enablement

• Collaborate with infrastructure, DevOps, cloud, and application teams to embed secure‑by‑design practices
• Provide architecture guidance on IAM, data encryption, network segmentation, endpoint protection, container security, etc.
• Guide implementation of Zero Trust Architecture, micro‑segmentation, SASE, and other modern security frameworks
• Conduct technical workshops and training to elevate organizational security maturity

Required Qualifications

• 6+ years of experience in information security, with at least 2 years in a security architecture role
• Strong knowledge of enterprise architecture frameworks (e.g., TOGAF, SABSA, Zachman)
• Expertise in security controls and architectures across cloud (AWS, Azure, GCP), on‑premise, and hybrid environments
• Deep understanding of network security, IAM, encryption, firewalls, SIEM, and secure development practices
• Experience conducting risk assessments, threat modeling, and architecture reviews

Preferred Qualifications

• Certifications: CISSP‑ISSAP, SABSA, CISM, CCSP, AWS/Azure Security Architect
• Experience implementing Zero Trust, SASE, or confidential computing strategies
• Familiarity with secure SDLC, CI/CD security integration, and DevSecOps principles
• Knowledge of regulatory frameworks (e.g., NIS2, GDPR, ISO 27001, SOC 2, FedRAMP)
• Strong communication skills with ability to influence and lead across technical and business domains