Cyber Security Architect

Details

Eneco is establishing its first security architecture function within the CISO Office and Digital & Tech domain. The role covers enterprise IT, cloud platforms, applications, operational technology, and supplier ecosystems across critical energy infrastructure. You will define the security blueprint, establish governance and standards, and act as the lead security voice for major programmes and platform initiatives.

Responsibilities

Security Architecture and Governance

• Define and own enterprise security architecture principles, standards, reference architectures, and design patterns across IT, OT, cloud, and application domains.
• Develop solution security architectures for major technology initiatives, platforms, and transformation programmes.
• Establish and operate security architecture review processes and governance forums.
• Review solution designs, implementations, architectural exceptions, and risk-based compensating controls.
• Maintain a target-state security architecture aligned with business strategy and regulatory requirements.

Programmes, Cloud, and Infrastructure

• Act as lead security architect for strategic programmes, platform migrations, and major technology changes.
• Integrate security requirements into procurement, development, implementation, and operational processes.
• Define secure cloud architecture patterns and guidance, primarily for Microsoft Azure, including hybrid and SaaS contexts.
• Lead adoption of zero-trust, identity-centric, and modern security architecture principles.
• Review network, endpoint, infrastructure, and platform solutions against security standards.

Application and Data Security

• Define secure application architecture requirements, API security standards, and data protection controls.
• Embed security into the software development lifecycle and DevSecOps practices.
• Provide privacy-by-design and data-classification requirements.
• Review application and integration designs for security risks and architectural alignment.

OT, Third-Party Security, and Continuous Improvement

• Develop OT security reference architectures for operational technology environments.
• Support teams in securing industrial control systems and critical infrastructure.
• Assess vendor and solution compliance with OT security requirements, including ISA/IEC 62443 where applicable.
• Define security architecture requirements for third-party integrations, managed services, cloud providers, and external connections.
• Identify architectural gaps, technical debt, and security improvement opportunities.
• Contribute to multi-year security architecture roadmaps and track emerging technologies, threats, and industry best practices.

Requirements

• At least 7 years of experience in cybersecurity, information security, security engineering, or security architecture.
• At least 3 years in a dedicated Security Architect, Lead Security Engineer, or Enterprise Security Architect role.
• Experience designing security architectures across complex enterprise environments, including IT, OT, cloud, applications, and supplier ecosystems.
• Experience supporting major transformation, cloud migration, modernisation, or critical infrastructure programmes.
• Ability to influence and challenge senior business and technology stakeholders.
• Experience establishing security architecture functions, governance processes, frameworks, standards, and reference architectures.
• Knowledge of enterprise security architecture, security-by-design, network and infrastructure security, identity and access management, zero-trust architecture, application and API security, secure SDLC, DevSecOps, data security, encryption, privacy-by-design, vulnerability management, security monitoring, cyber resilience, and risk management.
• Cloud security knowledge, primarily Microsoft Azure; AWS and hybrid cloud experience is valued.
• OT/ICS security architecture experience is preferred.
• Knowledge of ISO/IEC 27001, ISO/IEC 27002, NIST Cybersecurity Framework, CIS Controls, NIS2, GDPR, ISA/IEC 62443, and DORA where applicable.
• Preferred certifications include CISSP, SABSA, TOGAF, CISM, CCSP, Microsoft Azure security or solutions architecture certifications, GIAC certifications, and ISO 27001 Lead Implementer or Lead Auditor.

Benefits

• Gross annual salary of €82,000–€110,000, including FlexBudget and 8% holiday allowance; a bonus or collective profit sharing may apply depending on the role.
• Flexible FlexBudget options, including payout, additional holiday days, or saving.
• Personal and professional development opportunities.
• Hybrid working model: 40% office, 40% home, and 20% flexible; with manager approval, working abroad within approved countries is possible for up to 3 weeks per year, with a maximum of 2 consecutive weeks.
• The hybrid working model is based in Rotterdam.