IT Security Architect

IT Security Architect will be part of Global IT Security Architecture Team and will be accountable for planning, designing and communicating security architecture roadmap and strategy, ensuring that solution designs are aligned with the target architecture landscapes meeting both business and technology requirements.

How you will get the job done

• being responsible for translating security requirements into service portfolio that will help to establish the scope of security architecture function
• contributing to development and implementation of security architecture process into process portfolio and ensuring effective and efficient collaboration as well as and enforcement of security architecture principles
• supporting analysis and assessments of the current technological landscapes, discovering gaps, deficiencies and recommending design or implementation improvements
• translating information security policies into a technical security control framework and security architectural blueprints, communicating these to the projects and stakeholders
• participating in definition, prototyping and continuous development of ERGO security reference architecture, methodology, models and security controls; aligning requirements from the architecture teams, technology teams and Global IT Security colleagues
• supporting and/or consulting implementation of security architecture
• managing stakeholder relationship by working closely with business stakeholders, domain leaders, process owners and third-party suppliers
• ensuring that projects and solutions incorporate secure by design principal and that IT security is embedded at early stages of the development process
• challenging the status-quo, service landscapes and security solutions in order to improve the adherence with security principles as well as policies and standards
• reviewing existing architectures in the projects and assessing the security maturity and compliance levels, with the goal of jointly identifying potential short- and long-term improvement

Let's be healthy – medical package, sports card, and numerous sports sections – these are some of the benefits that help our employees stay in good shape.

Let's be balanced – work-life balance is a key aspect of a healthy workplace. We offer our employees flexible working hours, a confidential employee assistant program, as well as the possibility of remote working. However, staying at home with our in-office gaming room and dog-friendly office in Warsaw won’t be easy.

Let's be smart – we organize numerous workshops and training courses. Thanks to hackathons and meetups, our specialists share their expertise with others. Additionally, we have a wide range of digital learning platforms and language courses.

Let's be responsible – each year, we participate in several CSR activities, during which, together with our colleagues, we do our best to create a better future.

Let's be fun – company-wide bike races and soccer matches, film marathons in our cinema room or other engaging team-building activities – we got it covered!

Let's be diverse – every team member is valued, regardless of gender, nationality, religious beliefs, disability, age, and sexual orientation or identity. Your qualifications, experience, and mindset are our greatest benefit!

• fluency in English and Polish (C1)
• proven knowledge of international security standards and methodologies as well as additional qualification (CISSP, CISA, CISM, SABSA, TOGAF or equivalent)
• at least 5 years of experience working in enterprise environment and 2 years of experience working as a security architect or similar position
• hands-on experience and superior technical knowledge in at least two of following technologies: Windows, Linux/Unix, Networking, Databases, Middleware, CI/CD, Containerization/K8S, Public cloud (AWS, Azure, GCP)
• ability to translate business requirements into technical solutions
• presentation skills including ability to present and explain complex cybersecurity solutions to non-technical audience (including C-level management)
• good analytical and conceptual skills
• excellent experience in security solution evaluation (e.g. Proof of Concept) and recommendation
• ability to build authority and form strong relationships
• ability to deal with ambiguity while working in a continually changing environment under indirect supervision
• education degree related to IT or Security