SECURITY ARCHITECT

At IT Industrial Company (Contractor), in Multiple Locations Expires at : 2025-06-19 Remote policy : Full remote Note : Although experience in at least one major Cloud platform (Azure, GCP, AWS) is requested, the focus and priority will be on AWS. The mission of the I&T Digital Security organization is to deliver an efficient and effective service that has scalability and flexibility to support the demands of the business. Reporting to the D&D Security Architecture & Assurance and working very closely with IT Strategy and Architecture function, you will develop and implement information security architecture and technology solutions to ensure information security and compliance requirements of the organization as we go through our Digital Transformation Program and beyond. Visibility and the ability to build close working relationships with D&D team members, business stakeholders as well as external partners is essential. The role demands business insight, technical acuity, and the ability to think, communicate, and write at various levels of abstraction. In this position, you will support the definition of our security architecture for Digital & Data capabilities and create security architecture artifacts (models, templates, standards, and procedures) that can be used to leverage security capabilities in projects and operations. The successful individual will act as a security subject matter expert to ensure compliance with enterprise and digital security policies, industry regulations, and best practices. Areas of responsibility Contributes to creating and reviewing a security systems capability strategy that meets the business's strategic requirements. Assesses current capabilities and identifies required changes in capabilities to achieve objectives. Creates, iterates, and maintains security architectural models and views embodying the key principles that describe the organization's future state, and that enable its evolution. Interprets business goals and drivers. Documents and communicates constraints, standards, and guiding principles necessary to define, assure, and govern the required evolution. Provides advice and guidance on security strategies to manage identified risks and ensure adoption and adherence to standards. Contributes to the development of information security policy, standards, and guidelines. Develops new architectures that mitigate the risks posed by new technologies and business practices. Emerging Technologies Monitors and assesses new and emerging information security technologies, products, services, methods, and techniques. Advice & Guidance Provides information security advice and recommendations, based on expertise and experience, to address the organization's needs. Provides definitive and expert advice in the information security area. Provides advice and guidance to support the adoption of methods and tools and adherence to policies and standards. Risk & Compliance Provides advice and guidance in the use of organizational standards. Assists in the development of new or improved practices and organizational processes or standards. Identifies risks and vulnerabilities, assesses their impact and probability, develops mitigation strategies, and reports to the business. Main requirements Requirements : Extensive experience working in information security architecture or design roles within large and distributed enterprise environments and supporting initiatives such as big data, cloud, IoT, edge computing, hybrid integration platforms (B2B), mobile apps, etc. Experience in developing security architecture artifacts and reference architectures for digital, data, and IoT platforms ideally within the manufacturing sector or equivalent. Experience working with external service and technology providers through various parts of the lifecycle (security horizon scanning and awareness, RFP / RFI, design, build, operate). Strong interpersonal skills, with an emphasis on the ability to effectively influence others and bring security architecture to life for business and technology leaders alike. A team-focused mentality with the proven ability to work effectively with diverse multi-cultural internal and external stakeholders. An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner. Experience working in an Agile or Scrum environment (desirable). Security design experience in at least one major cloud platform (Azure, GCP, AWS). Qualifications Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or related field (desirable). Certifications such as CISSP, CCSP, TOGAF, SABSA would be an advantage. #J-18808-Ljbffr