IT Security Architect – Risk Assessment & Cloud Security

About the role

As an experienced IT Security Architect you will join the IT team to assess risk for large‑scale initiatives (EPICs) and define security controls across commercial web systems, energy trading platforms and cloud‑based data & analytics solutions. You will act as the single point of contact for security architecture, participating in governance boards and ensuring security‑by‑design is embedded in every project.

Key responsibilities

• Develop and maintain security reference architectures, patterns and standards.
• Provide security architecture guidance for IT projects, ensuring security‑by‑design principles are applied.
• Assess risks and define required controls for new applications, integrations and cloud solutions.
• Translate security policies and frameworks into practical controls and design requirements, including supplier contracts.
• Conduct supplier security assessments as part of the Third‑Party Risk Management process.
• Develop and maintain information security policies, processes, procedures, standards and guidelines.
• Support internal and external information security audits.

Required profile

• 15+ years of experience in security architecture for IT projects (SaaS, APIs, integrations, COTS, custom development, Cloud).
• Proven ability to work independently and drive tasks to completion.
• Fluent in English and either Dutch or French.
• Master’s degree in a STEM field or equivalent hands‑on experience.
• Relevant certifications such as ISSAP, SABSA, TOGAF or CISSP are a plus.

Required skills

• Security Architecture
• SaaS
• APIs
• Cloud technologies
• ISO 27001 implementation
• ISO 27005 risk management