Information Security Architect

Werken als Information Security Architect bij Eneco

Kom aan het roer te staan van de informatiebeveiliging binnen de CISO Office van Eneco's Digital & Tech domein. In deze rol combineer je diepgaande technische expertise met architecturale autoriteit en zakelijke invloed. Je krijgt de unieke kans om de beveiligingsblauwdruk vorm te geven over IT, OT, cloud, applicaties en toeleveringsketens.

Eneco biedt een dynamische werkomgeving waarin jouw visie direct impact heeft op de energietransitie en kritieke infrastructuren. Je werkt samen met gedreven collega's, enterprise architecten en senior stakeholders. Dankzij het hybride werkmodel vanuit Rotterdam ervaar je de perfecte balans tussen samenwerking op kantoor en flexibiliteit.

Wat Eneco jou te bieden heeft

• Een uitdagende senior rol met grote verantwoordelijkheid en impact binnen de energiesector.
• Uitstekende secundaire arbeidsvoorwaarden, waaronder een vaste eindejaarsuitkering en flexibele regelingen.
• Ruimte voor persoonlijke ontwikkeling, het bijwonen van congressen en het behalen van certificeringen.
• Een hybride werkomgeving met een moderne basis in Rotterdam.

Ben jij klaar om Eneco te beschermen en de standaarden voor de toekomst te bouwen? Solliciteer direct via de knop hieronder!

Belangrijkste verantwoordelijkheden

• Define and own enterprise security architecture principles, standards, reference architectures, and design patterns across IT, OT, cloud, and application domains

• Develop solution security architectures for major technology initiatives, platforms, and transformation programmes

• Embed secure-by-design and secure-by-default principles into every layer of the technology estate

• Maintain a current target-state security architecture aligned to business strategy and regulatory requirements

• Establish and operate security architecture review processes and governance forums

• Review solution designs, technology implementations, and architectural exceptions — including risk-based compensating controls

• Assess alignment with security policies, standards, risk appetite, NIS2, DORA, GDPR, and applicable regulation

• Provide clear, risk-based recommendations that senior business and technology stakeholders can act on

• Act as lead security architect for strategic programmes, platform migrations, and major technology changes

• Conduct architecture and design reviews at every stage of the project lifecycle

• Integrate security requirements into procurement, development, implementation, and operational processes

• Validate that controls are appropriately designed, implemented, and effective

• Define secure cloud architecture patterns and implementation guidance — primarily Azure, including hybrid and SaaS contexts

• Lead adoption of zero-trust, identity-centric, and modern security architecture principles

• Develop reusable security standards for infrastructure and platform engineering teams

• Review network, endpoint, and infrastructure solutions against security architecture standards

• Define secure application architecture requirements, API security standards, and data protection controls

• Embed security within the software development lifecycle and DevSecOps practices

• Provide privacy-by-design and data classification requirements across technology programmes

• Review application and integration designs for security risks and architectural alignment

Vereisten

• Minimum 7 years in cybersecurity, information security, security engineering, or security architecture

• Minimum 3 years in a dedicated Security Architect, Lead Security Engineer, or Enterprise Security Architect role

• Experience designing security architectures across complex enterprise environments — IT, OT, cloud, application, and supplier ecosystems

• Experience supporting major transformation, cloud migration, modernisation, or critical infrastructure programmes

• Demonstrated ability to influence and challenge senior business and technology stakeholders

• Enterprise security architecture and security-by-design

• Cloud security — primarily Microsoft Azure; AWS and hybrid cloud experience valued

• Network, endpoint, infrastructure, and platform security

• Identity and access management and zero-trust architecture

• Application security, API security, secure SDLC, and DevSecOps

• Data security, classification, encryption, and privacy-by-design

• OT / ICS security architecture — ISA/IEC 62443 preferred

• Third-party and supply chain security

• Vulnerability management, security monitoring, and detection

• Business continuity, cyber resilience, and risk management

• ISO/IEC 27001 and ISO/IEC 27002

• NIST Cybersecurity Framework

• CIS Controls

• NIS2 and applicable national cybersecurity legislation

• GDPR

Secundaire arbeidsvoorwaarden

• Extra beloning (bijv. 13e maand, vaste eindejaarsuitkering)
• Prestatiegebonden beloning
• Pensioen