IT Security Architect

Bosal; Santiago de Querétaro; On-site; MXN 900,000 - 1,300,000; Full time

Job summary

BOSAL is seeking an IT Security Architect in Querétaro to define security architecture standards and lead a risk-driven vulnerability management program across on‑premises and cloud environments.

You will ensure security is embedded in systems, oversee design reviews, and drive remediation strategies while aligning with audit requirements and industry best practices.

Qualifications

• Strong knowledge of security architecture methodologies and best practices.
• Experience with vulnerability management platforms (e.g. Tenable or similar solutions).
• Solid understanding of Windows and Linux security.
• Knowledge of network and identity security fundamentals.
• Experience with risk assessment and threat modeling techniques.

Responsibilities

• Define and maintain security architecture principles, standards, and reference designs.
• Perform security design reviews for infrastructure, network changes, applications and cloud services.
• Define baseline security requirements for Windows, Linux servers, network segmentation and IAM.
• Own the vulnerability management program end-to-end, including defining the scanning strategy and remediation SLA tracking.
• Act as the security authority for technical risk decisions, including compensating controls and risk acceptance.
• Provide input and evidence for TISAX assessments related to security controls.
• Advise projects on secure architecture and remediation strategies.
• Ensure controls are measurable and ready for audits.

Skills

Security architecture

Vulnerability management

Windows security

Linux security

Network security

Identity security

Risk assessment

Threat modeling

Tools

Tenable

Job description

BOSAL is a Dutch privately owned company, mainly known as a global Tier 1 automotive supplier, in business since 1923. We employ about 2200 people in 16 production facilities of which the largest ones are situated in Czechia, Mexico, Turkey, Brasil, US and South Africa. Our corporate research center is based in Belgium, next to that we run 5 other R&D satellites worldwide.

Currently we are looking for an IT Security Architect in Querétaro (Mexico):

As an IT Security Architect, you will shape the foundation of secure technology by defining robust security architecture standards and leading a risk-driven vulnerability management program. In this pivotal role, you ensure that security is designed and embedded into systems, while technical risks are systematically identified, prioritized, and reduced.

Your responsibilities:

• You will define and maintain security architecture principles, standards, and reference designs.
• Perform security design reviews for infrastructure, network changes, applications and cloud services.
• Define baseline security requirements for Windows, Linux servers, network segmentation and identity and access management
• Own the vulnerability management program end-to-end, including defining the scanning strategy, implementing risk-based prioritization using asset criticality and establishing remediation SLA's and tracking progress.
• Act as the security authority for technical risk decisions, including compensating controls and formal risk acceptance.
• Provide input and supporting evidence for TISAX assessments related to technical security controls.
• Advise projects and teams on secure architecture, remediation strategies, and security best practices.
• Ensure architecture and vulnerability management controls are effective, measurable, and ready for internal and external audits.

Your profile:

Skills:

• Strong knowledge of security architecture methodologies and best practices.
• Experience with vulnerability management platforms (e.g. Tenable or similar solutions).
• Solid understanding of Windows and Linux security.
• Knowledge of network and identity security fundamentals.
• Experience with risk assessment and threat modeling techniques.
• Relevant security certifications are considered a strong asset.

Experience:

• 5+ years of experience in security architecture or security engineering.
• Hands-on experience building and operating vulnerability management programs.
• Experience working in hybrid environments (on-premises and cloud).
• Proven collaboration with infrastructure, network and application teams to implement secure solutions.

Do you have an entrepreneurial mindset and do you want to invest in your career? Then we offer an inspiring job in an unique environment with an interesting remuneration package with additional benefits.