Cybersecurity Architect
ARHS · Warsaw, Masovian Voivodeship, pl ·
- Category
- Security
- Visa sponsorship
- Yes
- Company size
- 501-1000
- Salary
- PLN 250,000 – 350,000
Designs and maintains secure IT architectures for an enterprise, aligning cybersecurity strategy with business goals and ensuring compliance with standards and regulations.
- Design, and propose secure architecture to implement the organisation’s strategy
- Develop organisation’s cybersecurity architecture to address security and privacy requirements
- Produce architectural documentation and specifications
- Present high-level security architecture to stakeholders
- Establish a secure environment during the development life-cycle of systems, service, and/or products
- Lead the development, integration and maintenance of cybersecurity components ensuring the cybersecurity specifications are met
- Analyse and evaluate the cybersecurity of the organisation’s architecture
- Assure the security of the solution architectures through security reviews
- Collaborate with key security personnel and other teams in applying the security principles in the architecture
- Evaluate the impact of cybersecurity solutions on the design and performance of the organisation’s architecture
- Adapt the organisation’s security architecture to emerging threats
- Assess the implemented architecture to maintain an appropriate level of security
- Perform market evaluation to identify appropriate solutions to business requirements
- Evaluate security solutions through Proof of Concepts
- Design solutions including service aspects (cf. ITIL Service design activities)
- Contribute to the definition of the security architectural blueprint
- Integrate new solutions with existing framework based on a security architectural blueprint
- Transition solutions to teams in charge of daily operations
- Balances technological opportunities with business processes requirements
- Maintains a holistic view of the organisation’s strategy, processes, information and ICT assets
- Links the business mission, strategy and processes to the ICT and Cyber Defence strategies
- Align Cyber Security strategy and planning with the organisation’s business goals
- Streamline business processes, functions, procedures and workflows and apply a consistent implementation approach
- Recommend resolutions and improvements
- Ensures, that technical solutions, procedures and models for development are up-to-date and comply with standards
- Check technology development and integrates into new solutions
- Master's Degree (EQF Level 7) in Computer Science , Cybersecurity, Information Security, Information Systems or related discipline
- Minimum 10 years of IT professional experience.
- Minimum 8 years in Cybersecurity Architecture or equivalent senior cybersecurity positions.
- Experience in large-scale enterprise or public sector environments is considered an asset
- English proficiency: minimum C1 level
- Mandatory Certifications :
- At least 1 certification among:
- SABSA Chartered Security Architect – Foundation Certificate (SCF)
- CISSP-ISSAP (ISC)2 Certified Information Systems Security Architecture Professional)
- TOGAF Certified (The Open Group)
- And additionally at least 2 certifications among:
- TOGAF Foundation (The Open Group)
- CISSP (Certified Information Systems Security Professional)
- CCSP (ISC2 Certified Cloud Security Professional)
- CISA (Certified Information Systems Auditor)
- CISM (Certified Information Security Manager)
- SABSA Chartered Security Architect – Practitioner Certificate (SCP)
- CNDA (EC-Council Certified Network Defence Architect)
- CSSLP (ISC2 Certified Secure Software Lifecycle Professional)
- CGEIT (ISACA Certified in the Governance of Enterprise IT)
- CRISC (ISACA Certified in Risk and Information Systems Control)
- SCPA (SABSA Certified Security Architecture Design & Development Practitioner)
- SCMA (SABSA Certified Security Architecture Design & Development Specialist)
- GSNA (GIAC Certified Systems and Network Auditor)
- GCCC (GIAC Certified Critical Controls)
- GPPA (GIAC Certified Perimeter Protection Analyst)
- Or for any listed above, an equivalent alternative certification from other vendors recognized internationally (subject to acceptance as a valid credential by the Contracting Authority).
- Cybersecurity recommendations and best practices
- Cybersecurity standards, methodologies and frameworks
- Cybersecurity-related requirements analysis
- Secure development lifecycle
- Security architecture reference models
- Cybersecurity-related technologies
- Cybersecurity controls and solutions
- Cybersecurity risks
- Cyber threats
- Cybersecurity trends
- Legal, regulatory and legislative compliance requirements, recommendations and best practices
- Legacy cybersecurity procedures
- Privacy-Enhancing Technologies (PET)
- Understanding of organisation’s mission and business objectives risks
- Knowledge of secure development lifecycle
- Knowledge of security architecture reference models and security solutions
- Knowledge of the latest technologies and solutions
- Knowledge of the latest cybersecurity trends
- Conduct user and business requirements analysis
- Draw architectural and functional specifications
- Design cybersecurity systems and architectures based on security and privacy by design and by defaults principles
- Guide and communicate with implementers and IT personnel
- Report, communicate and present to stakeholders
- Propose cybersecurity architectures based on stakeholder's needs and budget
- Select appropriate specifications, procedures, and controls (e.g. on Cryptographic models, access control techniques)
- Build resilience against points of failure across the architecture
- Provide technological design leadership
- Lead the integration of security solution