Founding Security Architect - IT & OT for Critical Infra

Eneco; Rotterdam; Hybrid; EUR 120,000 - 180,000; Full time

Job summary

Eneco is building a new security architecture function to protect energy infrastructure and digital platforms. You will define the blueprint across IT, OT, cloud, and supplier ecosystems, own the standards, and lead security reviews for major programmes.

You will drive security‑by‑design from cloud patterns to DevSecOps, identify gaps, and translate them into a practical roadmap aligned with regulatory requirements. A senior, influential IC role in a transforming environment.

Qualifications

• Minimum 7 years in cybersecurity, information security, security engineering, or security architecture.
• Minimum 3 years in a dedicated Security Architect, Lead Security Engineer, or Enterprise Security Architect role.
• Experience designing security architectures across IT, OT, cloud, application and supplier ecosystems.
• Experience supporting major transformation, cloud migration, modernisation, or critical infrastructure programmes.
• Ability to influence senior business and technology stakeholders.

Responsibilities

• Define the target‑state security architecture across IT, OT, cloud and supplier ecosystems.
• Own standards, run reviews, and act as the lead security voice in major programmes.
• Drive security‑by‑design across cloud platforms, DevSecOps, and OT reference architectures.
• Develop reusable security patterns and ensure alignment with regulatory requirements (NIS2, DORA, GDPR).
• Lead governance forums, architecture reviews and risk‑based recommendations.

Skills

Security architecture

Security by design

Cloud security

OT/ICS security

DevSecOps

Vulnerability management

Risk management

Zero-trust / IAM

Governance & assurance

Education

CISSP

TOGAF

CISM

CCSP

ISO 27001 Lead Implementer/Auditor

Azure security certification

Tools

Azure

Job description

Eneco is building a new security architecture function to protect energy infrastructure and digital platforms. You will define the blueprint across IT, OT, cloud, and supplier ecosystems, own the standards, and lead security reviews for major programmes.

You will drive security‑by‑design from cloud patterns to DevSecOps, identify gaps, and translate them into a practical roadmap aligned with regulatory requirements. A senior, influential IC role in a transforming environment.