Security Architect

We are looking for a Security Architect to join an international team responsible for delivering innovative solutions that enhance connected vehicle services, fleet management, and self-service mobility experiences. In this role, you will focus on Security by Design, security architecture, and risk management, supporting projects from the initial design phase through to production. You will also act as a security focal point for Third-Party Risk Management, supporting supplier security assessments and contractual security requirements.
Requirements:
Minimum 5 years of experience in IT Security, including at least 3 years of experience in Security Architecture or Security Assurance Advanced knowledge of security risk assessment methodologies such as EBIOS RM, ISO 27005 or equivalent Strong understanding of security architecture principles, including network zoning, traffic flows, defense-in-depth and least privilege Knowledge of IAM/PAM, Application Security, Cloud Security and DevSecOps Good knowledge of DORA, NIS2, GDPR, ISO/IEC 27001/27002 and NIST CSF Proven experience in an operational security environment such as SOC, CERT, or Incident Handling Fluent in English and Polish Willingness to work from the Warsaw office 2 days per week
Must have: EBIOS RM, IAM, PAM, MFA, OWASP, IASS, Containerization, Kubernetes
Daily tasks: - Ensuring Security by Design across IT projects and new services
– Assessing security risks and validating application, cloud, infrastructure and network architectures
– Defining security requirements and security patterns for projects and solutions
– Advising teams on IAM, PAM, Zero Trust, Application Security and DevSecOps
– Supporting security reviews and final security sign-off before production release
– Assessing third-party security risks and supporting supplier security reviews
– Developing security standards, reusable security patterns and hardening guidelines
– Promoting security awareness and secure development practices across the organization