CISO Security Architect – OT Security Expert
Job Details
Hiring Process
Time to Answer
2 open days
Process
1 Phone Call
1 Onsite Interview
Days to get an Offer
4 Days after Interview
Overview
CISO Security Architect – OT Security Expert with 10+ years of experience in cybersecurity, including 3+ years in critical infrastructure/defense and OT hybrid environments. Designs secure architectures across network, application, data, SAP, ICAM, cloud, SIEM, and PKI domains. Strong expertise in ISO 27001, IEC 62443, NIST frameworks, and EU/Belgian compliance.
Job Responsibilities
- Design secure network solutions and architectures to protect against cyber threats, in line with enterprise architecture methodology, principles, guardrails, and standards.
- Support other architects to ensure security controls are embedded in system designs and architecture.
- Review architecture proposals and provide feedback on residual risks to project managers and lead architects.
- Participate in architecture councils and autonomously decide whether or not to allow a project to pass the “gate” in the development lifecycle.
- Conduct security risk assessments and oversee the execution of penetration tests to identify vulnerabilities.
- Develop risk mitigation strategies and recommend appropriate security controls.
- Monitor and evaluate emerging threats to adjust security strategies accordingly.
- Report existing vulnerabilities to the GRC Risk Team for proper registration in the risk register and risk reporting to the Risk Office.
- Understand and provide guidance for compliance with relevant security standards (e.g., ISO 27001, NIST).
- Develop and enforce security policies and standards across the organization, reporting to the CISO Management.
- Work with regulatory bodies to ensure understanding of and adherence to legal and compliance requirements.
- Collaborate with IT and business units to integrate security requirements into all aspects of IT projects.
- Work with IT teams, compliance officers, risk management, and other stakeholders to ensure security objectives are met.
- Communicate security risks and solutions to management and stakeholders.
- Provide guidance and training to IT staff on security best practices and policies.
- Support the response to security incidents and breaches.
- Conduct investigations and post-incident analysis.
- Propose action plans for timely resolution of security issues and implementation of corrective measures.
- Evaluate and recommend security products and technologies.
- Stay up to date with emerging security technologies and industry trends.
- Oversee the deployment and configuration of security systems and tools.
- Evaluate and select security technologies and tools that meet the organization’s needs.
- Create and implement a threat modeling methodology to further improve the existing risk management process.
- Perform threat modeling for new and existing solutions across the IT landscape.
- Provide advice during the design phase of projects on security requirements.
- Support the CISO management team with the creation, implementation, and maintenance of CISO capabilities, services, and processes.
- Help define and prioritize security initiatives and projects.
Must Have Skills
- Master’s degree in Cybersecurity, Computer Science, Mathematics, Physics, or Engineering.
- Minimum 10 years of experience in the Cybersecurity domain, including at least 3 years in critical infrastructure or defense.
- Minimum 3 years of experience in OT within complex hybrid environments (IT, OT, IoT, Cloud, ERP).
- Trained in ISO 27001 Lead Auditor, IEC 62443, or NIS2 Cyber Fundamentals.
- Willingness to work on-site when needed.
- Proven track record in developing and maintaining security processes, policies, and standards aligned with business objectives and applicable regulatory frameworks, including European Union and Belgian laws, as well as ISO 27001, IEC 62443, and the NIST SP series.
- Proven track record in designing and implementing security architecture across network, application, and data domains (including network security, SAP, ICAM, authentication and authorisation protocols, PKI, XDR, SIEM, monitoring, auditing, AI, and cloud environments).
-
Proficiency C1 in English and C1 in either French or Dutch.
Nice to have
- Excellent problem solving and analytical skills
- Effective communication and collaboration skills
- Result-oriented, structured, and organised
What's great in the job?
- Great team of smart people, in a friendly and open culture
- Expand your knowledge of various business industries
- Create content that will help our users on a daily basis
- Real responsibilities and challenges in a fast evolving company
Travailler chez yechte
Nous sommes un cabinet de conseil numérique indépendant avec des objectifs ambitieux et une présence mondiale. Nous accompagnons un large éventail d'entreprises, en constituant des équipes numériques et en fournissant des solutions numériques innovantes. Notre personnel multiculturel et diversifié, composé de « citoyens du monde », reflète cette inclusivité.
Nous accordons une grande importance à l'équilibre entre vie professionnelle et vie privée et nous nous efforçons de répondre aux attentes d'une équipe en pleine croissance, en investissant dans les personnes, car elles constituent notre plus grand atout. Notre croissance constante témoigne de cet engagement.
Venez travailler chez yechte, une entreprise en pleine expansion qui offre d'excellents avantages sociaux, des opportunités de développement personnel et la possibilité d'apprendre auprès de leaders accomplis. Nous sommes toujours à la recherche de professionnels exceptionnels pour rejoindre notre équipe.
Ce que nous offrons
Chaque employé a la possibilité de voir l'impact de son travail. Vous travaillez sur de véritables projets numériques et apportez une contribution tangible à l'entreprise. Nous voulons offrir à chacun la possibilité de s'épanouir sur le plan personnel, professionnel et social.
Flexibilité
Votre bien-être nous tient à cœur. Chez yechte, nous proposons des horaires flexibles et des modalités de travail hybrides à domicile/au bureau, améliorant ainsi l'équilibre entre vie professionnelle et vie privée et la productivité des employés.
Avantages attractifs
Votre confort nous tient à cœur. Chez yechte, nous proposons des plans de mobilité économiques et écologiques, des indemnités alimentaires et une couverture santé complète, afin d'améliorer la satisfaction de nos employés.
Développement personnel
Votre épanouissement nous tient à cœur. Chez yechte, nous vous proposons de stimuler votre développement personnel grâce à des formations et des certifications informatiques sur mesure, favorisant une culture d'agilité et d'expertise technologique.
