Security Architect

This is a consultancy mission delivered by Keystone Solutions. As a Keystone Solutions consultant, you will work closely with the client to translate the CISO's strategic directions into concrete and robust technical solutions. You will ensure consistency, regulatory compliance (NIS2, GDPR, ISO 27001, IEC 62443), and the effectiveness of security measures across the entire organization, particularly in the context of critical services and vital infrastructures.

As a Keystone Solutions consultant, you will contribute to an integrated security architecture covering IT, OT, cloud, and network environments, leveraging Archimate models and functional frameworks such as CyFun and ISO 27001 to ensure traceability and governance of security capabilities, thereby guaranteeing resilience and business continuity.

In this role, you operate as a Keystone Solutions consultant embedded with the client. You will spend time on site at client locations, collaborate with multi-disciplinary stakeholders, and deliver outcomes aligned with the client’s roadmap while benefitting from Keystone Solutions’ coaching, community of practice, and tooling. You bring Keystone’s standards of excellence to each engagement and act as a trusted advisor throughout the project lifecycle.

• Design, formalize, and evolve the target security architecture, integrating requirements from the early stages of project design (Security by Design, Privacy by Design).
• Define security architecture standards, models, and principles in alignment with the organization's strategic directions.
• Integrate key security domains (network, cloud, IT/OT/IoT, ICAM, data, cryptography, etc.) into a coherent and modular vision.
• Lead or contribute to security intake processes and architecture committees to ensure alignment of solutions with the target architecture.

• Perform technical and architectural risk assessments on projects, infrastructures, business applications, support applications, and industrial systems.
• Identify threats, vulnerabilities, and attack scenarios, and recommend appropriate mitigation measures.
• Maintain a consolidated and up-to-date view of risks across various domains, including ERP systems (SAP), IT/OT/IoT environments, the use of Artificial Intelligence, access management, and inter-application data flows.

• Contribute to drafting and updating technical security standards, ensuring their alignment with legal requirements and reference frameworks (CyFun, ISO 27001, IEC 62443, NIST, NIS2, GDPR, etc.).
• Contribute to security governance committees to guide technical decisions.
• Ensure consistency of architectural principles with internal standards and maintain traceability of decisions.
• Participate in coordination with competent authorities when necessary.

• Assist project, IT, OT, and business teams in integrating security requirements, including in complex contexts (SAP integration, IT/OT convergence, cloud solutions, access management).
• Provide support during design phases, solution analysis, or procurement processes (RFI/RFP).
• Ensure the alignment of critical architectural components (ICAM, detection and response solutions, cryptography, etc.) with overall security objectives and the IT roadmap.

• Monitor the evolution of threats, technologies, regulations, and governance models, identifying innovation opportunities.
• Propose continuous improvements to strengthen the security posture, including detection and response, logging, resilience, and identity management.
• Promote modeling, reusability, and consistency of architectural components.

• Master degree in IT, IT risk management, information security or science
• Minimum 4 years of experience in cybersecurity architecture and risk assessment in the railway industry
• Valid CISSP certification
• Following certifications: ISA/IEC 62443, ISO/IEC 27001 and ISO/IEC 42001
• You communicate fluently in English (spoken and written), at least level C1
• You communicate fluently in French or Dutch (spoken and written), at least level C1
• For this assignment, the client requires the consultant to agree to be present at the client office up to five days per week for the execution of the assignment. The required on-site presence may vary and will be communicated by the client to the consultant during the course of the assignment.

• The extent to which the proposal demonstrates the required competencies and complies with the stated requirements will be taken into account during the evaluation. Proposals that demonstrate these competencies and requirements more clearly, comprehensively, and convincingly will receive a higher score.
• Where specific experience is requested, a greater amount of demonstrable relevant experience will result in a higher evaluation score.
• Level of experience with cybersecurity frameworks (CyFun, ISO 27001, NIST, IEC 62443, NIS2, GDPR, CIS Controls), based on number of projects and role
• Experience in security assessments including Business Impact Analysis, Threat modelling, Risk assessment and Gap analysis (scope, role, frequency)
• Breadth of technical experience across domains (network, cloud, ICAM, cryptography, monitoring, AI security), based on number of domains covered and project context
• Demonstrated experience in stakeholder communication (type of stakeholders, level, context, deliverables)
• Experience in analysis and improvement initiatives (examples of assessments, recommendations, outcomes)
• Degree of autonomy and responsibility in previous roles (lead vs support, decision-making scope)
• Experience working in multi-stakeholder environments (number of teams, collaboration context)

• Operate as a Keystone Solutions consultant, collaborating on site at client premises and within hybrid setups to deliver secure architectures aligned with business objectives.
• Bring Keystone’s best practices, accelerators, and governance disciplines to ensure Security by Design and traceability across IT, OT, cloud, and network environments.
• Represent Keystone Solutions in architecture boards, risk review committees, and technical workshops, while maintaining a client-centric approach.

• Engage in diverse security challenges across industries with complex landscapes, including ERP, IT and OT convergence, cloud adoption, and AI security.
• Rotate across engagements over time, expanding your exposure to different technologies, maturity levels, and regulatory contexts.
• Partner with senior stakeholders, solution architects, and engineering teams to shape security outcomes that are pragmatic and resilient.

• Access continuous learning paths, study groups, and mentorship to deepen expertise in standards like ISO 27001, IEC 62443, and NIS2.
• Receive support for certifications and hands-on labs covering ICAM, cloud security, cryptography, monitoring, and incident response.
• Leverage Keystone’s communities of practice to exchange patterns, Archimate models, and reusable components.

• Grow from delivery excellence to advisory leadership, taking on decision-driving responsibilities in architecture and governance forums.
• Build a portfolio of high-impact engagements, supported by clear progression tracks and sponsorship from senior consultants and partners.
• Shape client security roadmaps while accelerating your career through varied, outcome-driven missions.

• Client partnership: we co-create with stakeholders and focus on measurable outcomes.
• Excellence: we apply rigorous standards, validated frameworks, and quality assurance to every deliverable.
• Integrity: we provide independent, risk-based recommendations grounded in evidence.
• Ownership: we take accountability from design to decision traceability and operational handover.
• Curiosity: we monitor evolving threats and technologies, translating insights into actionable improvements.

• Apply Security by Design and Privacy by Design across mixed IT, OT, and cloud ecosystems, ensuring compliance with NIS2, GDPR, ISO 27001, and IEC 62443.
• Model architectures with Archimate and maintain governance traceability using frameworks like CyFun.
• Lead risk assessments and threat modelling for SAP, ICAM, inter-application flows, and AI use cases, aligning with the client’s roadmaps.
• Drive continuous improvement initiatives that uplift detection and response, logging, resilience, and identity management capabilities.

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.