Architecte sécurité IT/OT

IT/OT Security Architect (Cybersecurity)

Context

Our client is a major Belgian railway infrastructure manager. You will join its ICT department, where the mission is to secure its IT and OT architectures and to continuously improve its security posture.

Your mission

You will define and validate IT/OT security architectures, embed Security by Design and Zero Trust principles in projects, carry out risk analyses, and support project teams in implementing cybersecurity requirements.

Responsibilities

• Define and validate the organisation’s IT/OT security architectures.

• Embed Security by Design and Zero Trust principles in projects.

• Perform risk analyses and identify technical vulnerabilities.

• Ensure compliance with applicable standards and regulations: NIS2, ISO 27001, IEC 62443, CIS and NIST.

• Support project teams in implementing cybersecurity requirements.

• Assess solutions and vendors from a security and resilience perspective.

• Contribute to cyber governance and the continuous improvement of the security posture.

Working conditions

• On-call duty (service de garde) required.

Experience

• At least 2 years in IT/OT cybersecurity and secure architectures.

• At least 5 years in each of the following areas:

  • Zero Trust and Security by Design principles

  • NIS2, ISO 27001, IEC 62443, CIS and NIST

  • Risk analysis and vulnerability management

  • Cloud, network, systems and critical infrastructure environments

  • Security assessment of technical solutions and architectures

  • Microsoft Azure and Microsoft 365

  • Microsoft Defender

  • Microsoft Sentinel

  • Microsoft Entra ID, Conditional Access and MFA

  • Microsoft cloud security principles and the Microsoft Zero Trust model

  • Microsoft Purview

• Dutch or French: C1 ; English: B2

• Ability to understand the client’s mission and key activities, and to integrate quickly into its teams.

• Clear and effective communication, with strong presentation skills.

Technical skills

• IT/OT cybersecurity and secure architectures

• Zero Trust and Security by Design

• Standards and regulations: NIS2, ISO 27001, IEC 62443, CIS, NIST

• Risk analysis and vulnerability management

• Cloud, network, systems and critical infrastructure

• Security assessment of solutions and architectures

• Microsoft cloud security, SIEM/SOAR, identity and access management

• Compliance, DLP, Information Protection and Insider Risk

Tools

• Microsoft Azure and Microsoft 365 ; Microsoft Defender: XDR, Endpoint, Cloud, Identity and Office 365 ; Microsoft Sentinel ; Microsoft Entra ID (Azure AD), Conditional Access and MFA ; Microsoft Purview