Cybersecurity Architect

• Design, and propose secure architecture to implement the organisation’s strategy
• Develop organisation’s cybersecurity architecture to address security and privacy requirements
• Produce architectural documentation and specifications
• Present high-level security architecture to stakeholders
• Establish a secure environment during the development life-cycle of systems, service, and/or products
• Lead the development, integration and maintenance of cybersecurity components ensuring the cybersecurity specifications are met
• Analyse and evaluate the cybersecurity of the organisation’s architecture
• Assure the security of the solution architectures through security reviews
• Collaborate with key security personnel and other teams in applying the security principles in the architecture
• Evaluate the impact of cybersecurity solutions on the design and performance of the organisation’s architecture
• Adapt the organisation’s security architecture to emerging threats
• Assess the implemented architecture to maintain an appropriate level of security
• Perform market evaluation to identify appropriate solutions to business requirements
• Evaluate security solutions through Proof of Concepts
• Design solutions including service aspects (cf. ITIL Service design activities)
• Contribute to the definition of the security architectural blueprint
• Integrate new solutions with existing framework based on a security architectural blueprint
• Transition solutions to teams in charge of daily operations
• Balances technological opportunities with business processes requirements
• Maintains a holistic view of the organisation’s strategy, processes, information and ICT assets
• Links the business mission, strategy and processes to the ICT and Cyber Defence strategies
• Align Cyber Security strategy and planning with the organisation’s business goals
• Streamline business processes, functions, procedures and workflows and apply a consistent implementation approach
• Recommend resolutions and improvements
• Ensures, that technical solutions, procedures and models for development are up-to-date and comply with standards
• Check technology development and integrates into new solutions
• Master's Degree (EQF Level 7) in Computer Science , Cybersecurity, Information Security, Information Systems or related discipline
• Minimum 10 years of IT professional experience.
• Minimum 8 years in Cybersecurity Architecture or equivalent senior cybersecurity positions.
• Experience in large-scale enterprise or public sector environments is considered an asset
• English proficiency: minimum C1 level
• Cybersecurity recommendations and best practices
• Cybersecurity standards, methodologies and frameworks
• Cybersecurity-related requirements analysis
• Secure development lifecycle
• Security architecture reference models
• Cybersecurity-related technologies
• Cybersecurity controls and solutions
• Cybersecurity risks
• Cyber threats
• Cybersecurity trends
• Legal, regulatory and legislative compliance requirements, recommendations and best practices
• Legacy cybersecurity procedures
• Privacy-Enhancing Technologies (PET)
• Understanding of organisation’s mission and business objectives risks
• Knowledge of secure development lifecycle
• Knowledge of security architecture reference models and security solutions
• Knowledge of the latest technologies and solutions
• Knowledge of the latest cybersecurity trends
• Conduct user and business requirements analysis
• Draw architectural and functional specifications
• Design cybersecurity systems and architectures based on security and privacy by design and by defaults principles
• Guide and communicate with implementers and IT personnel
• Report, communicate and present to stakeholders
• Propose cybersecurity architectures based on stakeholder's needs and budget
• Select appropriate specifications, procedures, and controls (e.g. on Cryptographic models, access control techniques)
• Build resilience against points of failure across the architecture
• Provide technological design leadership
• Lead the integration of security solution

Certifications

At least 4 certification among

• CISSP (Certified Information Systems Security Professional)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• SABSA Chartered Security Architect – Foundation Certificate (SCF)
• TOGAF Foundation
• CNDA (EC-Council Certified Network Defence Architect)
• CISSP-ISSAP (ISC² Certified Information Systems Security Architecture Professional)
• CGEIT (ISACA Certified in the Governance of Enterprise IT)
• CRISC (ISACA Certified in Risk and Information Systems Control)
• SCPA (SABSA Certified Security Architecture Design & Development Practitioner)
• SCMA (SABSA Certified Security Architecture Design & Development Specialist)
• TOGAF Certified
• GSNA (GIAC Certified Systems and Network Auditor)
• GCCC (GIAC Certified Critical Controls)
• GPPA (GIAC Certified Perimeter Protection Analyst)

or equivalent certification recognized internationally (subject to acceptance as a valid credential by the Contracting EU-I).