Security Architect

Job description

Context

• A leading company in the railway industry is looking for a Security Architect for an assignment.

• The role supports the organization’s security architecture and risk management activities in a context of critical services and vital infrastructures.

Missions

• Security architecture
  ◦ Design, formalize, and evolve the target security architecture, integrating requirements from the early stages of project design (Security by Design, Privacy by Design).
  ◦ Define security architecture standards, models, and principles in alignment with the organization’s strategic directions.
  ◦ Integrate key security domains (network, cloud, IT/OT/IoT, ICAM, data, cryptography, etc.) into a coherent and modular vision.
  ◦ Lead or contribute to security intake processes and architecture committees to ensure alignment of solutions with the target architecture.

• Risk management
  ◦ Perform technical and architectural risk assessments on projects, infrastructures, business applications, support applications, and industrial systems.
  ◦ Identify threats, vulnerabilities, and attack scenarios, and recommend appropriate mitigation measures.
  ◦ Maintain a consolidated and up-to-date view of risks across various domains, including ERP systems (SAP), IT/OT/IoT environments, the use of Artificial Intelligence, access management, and inter-application data flows.

• Standards, compliance, and governance
  ◦ Contribute to drafting and updating technical security standards, ensuring their alignment with legal requirements and reference frameworks (CyFun, ISO 27001, IEC 62443, NIST, NIS2, GDPR, etc.).
  ◦ Contribute to security governance committees to guide technical decisions.
  ◦ Ensure consistency of architectural principles with internal standards and maintain traceability of decisions.
  ◦ Participate in coordination with competent authorities when necessary.

• Support and advisory
  ◦ Assist project, IT, OT, and business teams in integrating security requirements, including in complex contexts (SAP integration, IT/OT convergence, cloud solutions, access management).
  ◦ Provide support during design phases, solution analysis, or procurement processes (RFI/RFP).
  ◦ Ensure the alignment of critical architectural components (ICAM, detection and response solutions, cryptography, etc.) with overall security objectives and the IT roadmap.

• Continuous improvement, security, and technology
  ◦ Monitor the evolution of threats, technologies, regulations, and governance models, identifying innovation opportunities.
  ◦ Propose continuous improvements to strengthen the security posture, including detection and response, logging, resilience, and identity management.
  ◦ Promote modeling, reusability, and consistency of architectural components.

Requirements

1. Minimum 4 years of experience in cybersecurity architecture and risk assessment in the railway industry
2. Strong knowledge of Security by Design and Privacy by Design
3. Experience with security architecture standards, models, and principles
4. Proficiency in performing technical and architectural risk assessments
5. Ability to identify threats, vulnerabilities, and attack scenarios and recommend mitigation measures
6. Experience in security governance and maintaining traceability of decisions
7. Skills in security requirements integration, solution analysis, and procurement processes
8. Ability to align critical architectural components with security objectives and the IT roadmap
9. Experience in continuous improvement of the security posture, including detection and response, logging, resilience, and identity management
10. Knowledge of modeling, reusability, and ensuring coherence across architectural components
11. Fluent communication skills in English (spoken and written, at least level C1)
12. Fluent communication skills in French or Dutch (spoken and written, at least level C1)
13. Master degree in IT, IT risk management