CS&S Security Architect

Description

Security capabilities at the company are run centrally, while security risk management sits inside each sector. The CS&S group is hiring a security architect to strengthen protection of confidential information belonging to the company and its customers.

The role lets you focus on cyber security while learning how the company works and runs its business.

Responsibilities

• Give architecture-level security direction and assurance for applications, AI solutions, products and services.
• Work with capability, solution and infrastructure architects, product and service teams, security specialists and IT to review designs, find technical risks and security gaps, set controls, and line up security work with business and IAS technology roadmaps.
• Carry out architecture-level technical risk assessments and define controls matched to the risk of new applications, AI solutions, products and services.
• Review secure solution designs, covering data flows, trust boundaries, integrations, identity, operational dependencies and residual risk.
• Turn technical findings into business exposure, delivery options, remediation priorities and investment decisions.
• Build security capability and service roadmaps that fit product portfolios, infrastructure plans and IT operations.
• Help infrastructure, solutions, product and operations architects build security into their roadmaps consistently.
• Support IAS product teams shipping solutions to customers in the field, and service teams running business-critical capabilities.
• Turn findings from penetration tests, vulnerability assessments, threat models, code reviews and compliance assessments into a practical remediation plan.
• Contribute to operational security decisions, architecture deviations and recurring security improvement initiatives.
• Run security control gap assessments (risk scoping) for new and existing solutions to find control weaknesses, judge the risks, and check alignment with enterprise governance, risk and compliance (GRC) requirements.

Requirements

• Hold a Master's degree in information security, cyber security or an equivalent field.
• Have 10+ years of experience in security architecture, design and requirements gathering.
• Have worked on multi-disciplinary projects and with customers.
• Know security technologies, architecture principles, risk management practices and industry best practice in depth.
• Have experience with security assessments and judging their security impact, plus familiarity with security frameworks and current EU legislation, including CRA and NIS 2.0.
• Have experience coordinating information security risks with business and technology stakeholders.
• Communicate technical risks and security requirements in business terms and influence decisions at every level.
• Have a proven record of creating, managing and delivering security roadmaps and improvements for infrastructure, products and services.
• Hold a recognised certification such as CISSP, CCSP, ISSAP, SABSA, TOGAF or an equivalent. Practical experience, architectural judgement and delivered security outcomes count for more than certificates alone.
• Experience in a high-tech, engineering or semiconductor setting is a strong advantage.
• Skilled at both communicating and listening.
• Solve problems well.
• Able to influence and manage stakeholders across several levels.
• Driven to find creative answers to complex problems that span several systems and customers.
• Turn security requirements and business goals into detailed specifications and designs that stakeholders at many levels accept.

Conditions

Based in Veldhoven, the Netherlands.

Report to the CS&S Security Lead within the CS&S Security & Risk Management department, part of Customer Solutions & Support.

Join the company's security community and work closely with risk management teams in other sectors and the central security competence teams.