Security Architect

ppFerranti is hiring a (Cyber) Security Architect to drive security‑by‑design across our technology landscape. You’ll combine architectural leadership with hands‑on execution, shaping secure solutions for our products, platforms, and customers in the energy sector. /p h3Your Responsibilities /h3 pIn a nutshell: You’re passionate about cybersecurity and architecture and you’re not afraid to roll up your sleeves /p pAs our (Cyber) Security Architect, you’ll design and implement pragmatic security solutions, embed security controls across our IT landscape, and translate compliance requirements into actions teams can actually execute. /p pYou’ll work closely with IT and development teams to integrate security across infrastructure, systems, and applications. You’ll also help keep our cybersecurity practices aligned with ISO 27001, while strengthening our posture against evolving threats—especially in Microsoft‑based environments. /p h3What you’ll do /h3 ul liDefine and maintain the organization’s security architecture framework. /li liTranslate regulatory and compliance requirements (NIS2, CRA, GDPR, AI Act, ISO 27001) into actionable controls, policies, and standards. /li liDesign and implement Microsoft‑based security architectures that support business and customer needs. /li liEmbed security controls across infrastructure, systems, and applications (security‑by‑design / privacy‑by‑design). /li liDrive Secure Development Lifecycle/ DevSecOps adoption and secure coding guidelines. /li liCreate clear architecture documentation and solution specifications. /li liPerform security reviews, audits, and support certifications together with the quality management team. /li liContinuously assess and improve security posture to defend against emerging threats. /li /ul h3Your profile /h3 h3What you bring /h3 ul liProven experience designing and implementing security architectures (hands‑on, not only advisory). /li liProvide security leadership across projects by driving practical adoption of security‑by‑design and privacy‑by‑design. /li liStrong analytical, problem‑solving, and stakeholder communication skills. /li liExperience integrating security controls into IT infrastructures, systems, and applications. /li liAbility to perform risk assessments and define pragmatic remediation strategies. /li liStrong writing skills for policies, standards, architecture documentation, and customer‑facing material. /li /ul h3Nice to have / Knowledge of /h3 ul liCertifications such as CISSP, Azure Security (or equivalent). /li liSecurity frameworks and standards (NIST, ISO 27001, CIS Benchmarks). /li liThreat modeling, vulnerability management and incident response. /li liRegulatory and compliance domains (GDPR, NIS2, CRA, AI Act). /li liCloud, endpoint and network security technologies; Microsoft security information protection (e.g., Purview). /li /ul h3You are /h3 ul liHands‑on and proactive—you take ownership and move from design to implementation. /li liComfortable working with both technical teams and business stakeholders. /li liPassionate about embedding security into every step of delivery (security‑by‑design). /li /ul h3We offer /h3 ul liA strategic role with impact on the company’s future security posture. /li liAn innovative environment where you stay close to the latest technologies. /li liA trust‑based culture where continuous growth is encouraged. /li liAn attractive and flexible salary package (company car, insurance, laptop, iPhone, internet, and options to tailor benefits to your needs). /li liOpen to freelance roles. /li /ul /p