Security Architect

About the role

We are looking for an experienced Security Architect to join our IT team. You will assess risk for major initiatives (EPICs) and define security controls across commercial web systems, energy trading platforms, and cloud‑based data & analytics solutions.

Key responsibilities

• Develop and maintain security reference architectures, patterns and standards.
• Provide security‑by‑design guidance for IT projects, ensuring appropriate controls are embedded from the start.
• Assess risks and define required controls for new applications, integrations and cloud solutions.
• Translate security policies and frameworks (e.g., ISO 27001, ISO 27005) into practical design requirements and supplier contracts.
• Establish strong relationships with business analysts, product owners, developers and solution architects.
• Conduct supplier security assessments as part of the Third‑Party Risk Management process.
• Develop and maintain information‑security policies, processes, procedures, standards and guidelines.
• Support internal and external information‑security audits.

Required profile

• 15+ years of experience in security architecture for IT projects (SaaS, APIs, integrations, COTS and custom development, cloud).
• Independent, self‑starter able to manage own tasks.
• Proven experience writing security policies, processes and supplier requirements.
• Hands‑on experience implementing ISO 27001 and ISO 27005.
• Preferred certifications: ISSAP, SABSA, TOGAF or CISSP.
• Fluent English and Dutch or French.
• Master’s degree in a STEM field or equivalent practical experience.

Required skills

• Security architecture
• Cloud security
• ISO 27001 implementation
• ISO 27005 risk assessment
• Risk assessment and mitigation
• SaaS security
• API security
• Integration security
• Commercial off‑the‑shelf (COTS) security
• Custom software development security