Security Architect

Freelance Opportunity – Security Architect Start date: 22/12/2026 Duration: 200 man-days

Location:
Brussels Region Remote policy: 3 days remote per week Languages: Dutch, French and English (mandatory) Project Description We are looking for an experienced Security Architect to support a large organization operating in a complex and highly regulated environment. The Security Architect will translate strategic cybersecurity objectives into robust technical solutions, ensuring architectural consistency, regulatory compliance and effective security measures across the organization. The role involves contributing to an integrated security architecture covering IT, OT, cloud and network environments, with a particular focus on critical services, infrastructure resilience and business continuity. The architect will leverage frameworks and methodologies such as ArchiMate, CyFun and ISO 27001 to ensure security governance, traceability and alignment with organizational objectives.

Key Responsibilities
• Design, formalize and continuously improve the target security architecture.
• Apply Security by Design and Privacy by Design principles.
• Define security architecture standards, models and principles.
• Integrate security domains including network, cloud, IT/OT/IoT, ICAM, data and cryptography.
• Participate in security architecture reviews and governance committees.
• Perform technical security assessments, threat modelling and risk analyses.
• Identify vulnerabilities, threats and potential attack scenarios.
• Maintain an overview of security risks across SAP, IT/OT/IoT, AI and interconnected systems.
• Ensure alignment with relevant regulations and frameworks, including NIS2, GDPR, ISO 27001, IEC 62443, NIST and CyFun.
• Support project teams, IT, OT and business stakeholders in implementing security requirements.
• Contribute to technical security standards and governance documentation.
• Support solution assessments and procurement processes (RFI/RFP).
• Evaluate and improve security capabilities relating to identity management, monitoring, detection, incident response and resilience.
• Monitor cybersecurity trends, emerging threats and regulatory developments.
• Promote architectural consistency, reusable security components and continuous improvement. Required Profile
• Bachelor's degree in IT, IT Risk Management, Information Security or equivalent.
• Minimum 5 years of experience in cybersecurity architecture and/or security risk assessment.
• Experience in complex hybrid environments involving IT, OT and IoT.
• Active CISSP certification.
• Fluent in English (minimum C1).
• Fluent in French and/or Dutch (minimum C1).
• Willingness to work on-site at least 2 days per week.
• Strong knowledge of cybersecurity frameworks and regulations, including:
• CyFun
• ISO 27001
• NIST
• IEC 62443
• NIS2
• GDPR
• CIS Controls
• 1–2 years of experience with SAP integration.
• Strong expertise in:
• Business Impact Analysis
• Threat Modelling
• Risk Assessment
• Gap Analysis
• Broad technical knowledge of network architecture, cloud security, ICAM, cryptography, security monitoring and AI security. Preferred Qualifications
• Additional active certifications such as CCSP, CISM, CISA, CGEIT, ISO 27001 Lead Implementer or SABSA.
• Experience in complex, multi-stakeholder environments.
• Strong communication skills with technical teams, business stakeholders and senior management.
• Experience leading security assessments and improvement initiatives.
• Ability to work autonomously and take ownership of architectural decisions.
• Strong analytical, organizational and problem-solving skills.
• Excellent stakeholder management and change management capabilities.
• Collaborative mindset and a proactive approach.