A leading organization is rebuilding its security architecture. You will lead this transformation project, integrating IAM, cloud security, incident response, and GRC into one coherent design. You will be a sparring partner for the CISO and CTO, communicating strategic choices to the organization and ensuring that security is an enabler.
The challenge involves migrating legacy systems to modern cloud environments, meeting compliance requirements (NIS2, GDPR), addressing a growing threat landscape, and aligning a team. Your architecture will determine whether the company can scale securely, quickly, and flexibly.
What you do
- Design and manage the enterprise security architecture: identity, access, network, cloud, incident response
- Advise CISO and management on technical security strategy and risk mitigation
- Lead technical teams (security engineers, cloud architects, IAM specialists) and ensure alignment
- Define security standards, reference architectures, and best practices for the organization
- Evaluate and implement security platforms (IAM, SIEM, cloud tools, Endpoint Protection)
- Ensure compliance with regulations (NIS2, GDPR, ISO 27001, sector-specific requirements)
- Manage vendor evaluation and technical selection of security solutions
- Monitor security trends, threats, and emerging technologies
Tech Stack & Tools. Platforms & Tooling.
- Okta, CyberArk, Entra ID, SailPoint (IAM/PAM)
- Splunk, Sentinel, QRadar (SIEM/Logging)
- CrowdStrike, Microsoft Defender, Cortex XDR (Endpoint/Detection)
- AWS Security Hub, Azure Defender, GCP Security Command Center (Cloud)
- ServiceNow, Archer (GRC/Risk)
- Firewalls, VPN, proxies, cloud firewalls
Frameworks & Standards.
- NIST Cybersecurity Framework
- ISO 27001/27002
- CIS Benchmarks
- MITRE ATT&CK
- COBIT
- NIS2, GDPR
Cloud & Infrastructure.
- AWS: VPC, IAM, KMS, Config, GuardDuty
- Azure: subscriptions, RBAC, Azure AD, Defender
- GCP: projects, IAM, VPC, Security Command Center
- Hybrid and multi-cloud orchestration
Methodologies.
- Security architecture design patterns
- Zero Trust architecture
- Risk-based prioritization
- Agile security governance
- Enterprise architecture frameworks (TOGAF, Zachman)
Certifications (preferred).
- CISSP
- CISM
- CCSK/CCSP (cloud)
- AWS Security Specialty / AZ-500
Must-haves.
- 10+ years of security experience, with at least 5 in an architect or lead role
- In-depth knowledge of IAM, cloud security, network security, and SIEM/logging
- Experience with multi-cloud architectures (AWS, Azure, or GCP)
- Track record in security strategy, standards
- CISSP or CISM certification (or equivalent)
- Strong communication skills: you speak technically with engineers and strategically with executives
Nice-to-haves.
- Experience with DevSecOps and API security
- Certification in AWS/Azure/GCP security specialties
- Knowledge of privacy (AVG/GDPR) and sector-specific compliance (banking, energy, telecom)
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.