Cyber Security Architect

Werken als Cyber Security Architect bij Eneco
Stap binnen in de CISO Office van Eneco binnen het Digital & Tech domein en maak direct impact. Als ervaren security-expert ben je de drijvende kracht achter de beveiliging van onze complexe bedrijfsomgeving, variërend van cloudplatformen tot industriële control systems (OT). Je krijgt de kans om zelf structuren neer te zetten, standaarden te bepalen en bruggen te slaan tussen business, IT en operations.
Eneco biedt een inspirerende werkomgeving waarin jouw visie ertoe doet. Je krijgt de ruimte om te opereren op zowel strategisch als tactisch niveau, omringd door gedreven professionals. Dankzij ons hybride werkmodel ervaar je optimale flexibiliteit vanuit onze hub in Rotterdam.
Wat wij bieden
Bij Eneco kun je rekenen op uitstekende primaire en secundaire arbeidsvoorwaarden, waaronder een aantrekkelijk salaris, een vaste eindejaarsuitkering en prestatiegerelateerde extra's. Solliciteer nu en help mee aan de energietransitie vanuit een veilige digitale basis!
Belangrijkste verantwoordelijkheden

• Define and own enterprise security architecture principles, standards, reference architectures, and design patterns across IT, OT, cloud, and application domains
• Develop solution security architectures for major technology initiatives, platforms, and transformation programmes
• Embed secure-by-design and secure-by-default principles into every layer of the technology estate
• Maintain a current target-state security architecture aligned to business strategy and regulatory requirements
• Establish and operate security architecture review processes and governance forums
• Review solution designs, technology implementations, and architectural exceptions — including risk-based compensating controls
• Assess alignment with security policies, standards, risk appetite, NIS2, DORA, GDPR, and applicable regulation
• Provide clear, risk-based recommendations that senior business and technology stakeholders can act on
• Act as lead security architect for strategic programmes, platform migrations, and major technology changes
• Conduct architecture and design reviews at every stage of the project lifecycle
• Integrate security requirements into procurement, development, implementation, and operational processes
• Validate that controls are appropriately designed, implemented, and effective
• Define secure cloud architecture patterns and implementation guidance — primarily Azure, including hybrid and SaaS contexts
• Lead adoption of zero-trust, identity-centric, and modern security architecture principles
• Develop reusable security standards for infrastructure and platform engineering teams
• Review network, endpoint, and infrastructure solutions against security architecture standards
• Define secure application architecture requirements, API security standards, and data protection controls
• Embed security within the software development lifecycle and DevSecOps practices
• Provide privacy-by-design and data classification requirements across technology programmes
• Review application and integration designs for security risks and architectural alignment

Vereisten

• Minimum 7 years in cybersecurity, information security, security engineering, or security architecture
• Minimum 3 years in a dedicated Security Architect, Lead Security Engineer, or Enterprise Security Architect role
• Experience designing security architectures across complex enterprise environments — IT, OT, cloud, application, and supplier ecosystems
• Experience supporting major transformation, cloud migration, modernisation, or critical infrastructure programmes
• Demonstrated ability to influence and challenge senior business and technology stakeholders