{"id":3153893,"url":"https://alion.io/job/eneco-information-security-architect","title":"Information Security Architect","company":{"id":1817445,"name":"Eneco","domain":"eneco.nl","url":"https://alion.io/company/eneco-nl","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career sitemap","truth_index":{"grade":"B","score":75,"open_postings":8,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":23,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rotterdam, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":179000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":672},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-23T12:07:27Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-25T05:48:16Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Eneco is one of Europe's leading sustainable energy companies, committed to climate neutrality by 2035 through our One Planet strategy. We are electrifying heating, mobility, and industry at scale - and the technology that supports that ambition is growing at the same pace as the ambition itself.\nSecurity architecture at Eneco is not a compliance checkbox. It sits at the intersection of a major IT and OT transformation, the protection of critical national infrastructure, and a regulatory environment - NIS2, DORA, GDPR - that is only becoming more demanding. The decisions made here are consequential in a way that most security roles are not: energy infrastructure, smart grid technology, OT environments, cloud platforms, and real-time trading systems. And unlike most organisations of this scale, Eneco does not yet have a Security Architect or an enterprise architecture function. You are not joining an established practice - you are founding one.\nAs Senior Security Architect, you combine deep technical expertise with architectural authority and business influence. You define the security blueprint across IT, OT, cloud, applications, and supplier ecosystems - and you make sure it is actually adopted. You own the standards, run the reviews, and act as the lead security voice in every major programme and platform initiative.\nYou drive security-by-design across the organisation, from cloud platform patterns to DevSecOps practices, from OT reference architectures to third-party integration requirements. You identify the gaps between where Eneco is today and where the security architecture needs to be, and you translate that into a roadmap the organisation can execute.\nSecurity Architecture & Design\nDefine and own enterprise security architecture principles, standards, reference architectures, and design patterns across IT, OT, cloud, and application domains\nDevelop solution security architectures for major technology initiatives, platforms, and transformation programmes\nEmbed secure-by-design and secure-by-default principles into every layer of the technology estate\nMaintain a current target-state security architecture aligned to business strategy and regulatory requirements\nGovernance & Assurance\nEstablish and operate security architecture review processes and governance forums\nReview solution designs, technology implementations, and architectural exceptions - including risk-based compensating controls\nAssess alignment with security policies, standards, risk appetite, NIS2, DORA, GDPR, and applicable regulation\nProvide clear, risk-based recommendations that senior business and technology stakeholders can act on\nProgrammes, Projects & Change\nAct as lead security architect for strategic programmes, platform migrations, and major technology changes\nConduct architecture and design reviews at every stage of the project lifecycle\nIntegrate security requirements into procurement, development, implementation, and operational processes\nValidate that controls are appropriately designed, implemented, and effective\nCloud & Infrastructure Security\nDefine secure cloud architecture patterns and implementation guidance - primarily Azure, including hybrid and SaaS contexts\nLead adoption of zero-trust, identity-centric, and modern security architecture principles\nDevelop reusable security standards for infrastructure and platform engineering teams\nReview network, endpoint, and infrastructure solutions against security architecture standards\nApplication & Data Security\nDefine secure application architecture requirements, API security standards, and data protection controls\nEmbed security within the software development lifecycle and DevSecOps practices\nProvide privacy-by-design and data classification requirements across technology programmes\nReview application and integration designs for security risks and architectural alignment\nOT / ICS Security Architecture\nDevelop and maintain OT security reference architectures for Eneco's operational technology environments\nSupport engineering teams in securing industrial control systems and critical infrastructure\nAssess vendor and solution compliance with OT security requirements, including ISA/IEC 62443 where applicable\nEnsure security architecture requirements align with safety, resilience, and operational availability constraints\nThird-Party & Supply Chain Security\nDefine security architecture requirements for third-party integrations, managed services, cloud providers, and external connections\nSupport the TPRM team with architectural assessments, technical risk evaluation, and remediation guidance\nReview architectures associated with suppliers and strategic partners\nRoadmap & Continuous Improvement\nIdentify architectural gaps, technical debt, and security improvement opportunities across the estate\nContribute to multi-year security architecture roadmaps and capability development initiatives\nTrack emerging technologies, threat developments, and industry best practice\nProvide thought leadership on future-state security architecture, resilience, and control maturity\nYou are a builder, not an inheritor. You have set up security architecture functions before - or you have operated in environments where you had to create the structure yourself because no one else was going to. You know how to establish a governance process from zero, write the first reference architecture before anyone asks for it, and earn credibility with engineering teams who have never had a security architect in the room before.\nYou are equally at home on the IT and OT side of the line. You understand the difference between a cloud platform decision and an industrial control system risk, and you know how to communicate both to a CISO, a platform engineer, and an operations team in the same week. You balance technical rigour with business pragmatism - you know when to hold the line on a standard and when a compensating control is the right call. You do not need a framework handed to you. You build the framework.\nRequired experience\nMinimum 7 years in cybersecurity, information security, security engineering, or security architecture\nMinimum 3 years in a dedicated Security Architect, Lead Security Engineer, or Enterprise Security Architect role\nExperience designing security architectures across complex enterprise environments - IT, OT, cloud, application, and supplier ecosystems\nExperience supporting major transformation, cloud migration, modernisation, or critical infrastructure programmes\nDemonstrated ability to influence and challenge senior business and technology stakeholders\nTechnical knowledge\nEnterprise security architecture and security-by-design\nCloud security - primarily Microsoft Azure; AWS and hybrid cloud experience valued\nNetwork, endpoint, infrastructure, and platform security\nIdentity and access management and zero-trust architecture\nApplication security, API security, secure SDLC, and DevSecOps\nData security, classification, encryption, and privacy-by-design\nOT / ICS security architecture - ISA/IEC 62443 preferred\nThird-party and supply chain security\nVulnerability management, security monitoring, and detection\nBusiness continuity, cyber resilience, and risk management\nFrameworks & regulatory knowledge\nISO/IEC 27001 and ISO/IEC 27002\nNIST Cybersecurity Framework\nCIS Controls\nNIS2 and applicable national cybersecurity legislation\nGDPR\nISA/IEC 62443 (preferred)\nDORA (where applicable)\nPreferred certifications\nCISSP\nSABSA\nTOGAF\nCISM\nCCSP\nMicrosoft Azure security or solutions architecture certifications\nGIAC security certifications\nISO 27001 Lead Implementer or Lead Auditor\nYou join Eneco's CISO Office within the Digital & Tech domain, embedded in the Security Architecture & Engineering team. You work across the full technology estate - cloud infrastructure, OT environments, application development, and supplier ecosystems - as the architectural authority on security.\nThe role connects you directly with enterprise architects, engineering leads, programme managers, and senior business stakeholders. You will operate at both strategic and technical levels: defining the target-state architecture, running the governance forums, and getting into the design detail when it matters. Eneco's hybrid working model is based in Rotterdam, with the flexibility to work where you deliver the most impact.\nThis is a senior individual contributor role with real influence. You are the expert in the room - and you will be expected to act like it.\nApply directly via the Eneco Careers Portal. Applications submitted by email or LinkedIn will not be processed.\nThird Party Disclaimer\nEneco manages recruitment through selected channels and preferred partners. Unsolicited acquisition, candidate submissions, or commercial outreach in relation to this vacancy are not appreciated.\nThe timing is the opportunity. Eneco is mid-transformation: cloud modernisation is running, OT environments are expanding, major platform decisions are being made right now. None of those decisions currently have a security architecture voice in the room. You arrive at exactly the moment when what you define will actually become the standard - because the patterns are not set yet. In two years, this will be an established function. Right now, it is a blank page.\n\nYou are the first. There is no Security Architect at Eneco. The function does not exist yet - and neither does an enterprise architecture layer above it. You are not inheriting a framework, a governance model, or a set of standards. You are building all of it from scratch, at a company that operates critical energy infrastructure across IT and OT, with NIS2, DORA, and an accelerating cloud and digital transformation already in motion. That combination - full mandate, no ceiling, genuinely consequential scope - is rare at any organisation of this scale.\n\nIT and OT - both, at real scale. Most security architect roles sit firmly on one side of that line. This one crosses it. Eneco's estate covers enterprise IT, cloud platforms, and operational technology in critical energy infrastructure - and the security architecture needs to work across all of it. If you have spent your career wanting to work at the intersection of digital transformation and OT security, without the compromise of doing only one half, this is that role.","description_format":"text","description_chars":10319,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"Netherlands","iso":"NL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy Efficiency","Information Security","Energy Management"],"lifecycle":[{"event":"open","at":"2026-10-23T13:44:11Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":23,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/eneco-information-security-architect","json_url":"https://alion.io/job/eneco-information-security-architect.json","meta":{"generated_at":"2026-10-25T05:59:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8261,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1817445},"rest":"https://alion.io/mcp/rest/get_company?id=1817445"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feneco-information-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feneco-information-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feneco-information-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/eneco-information-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feneco-information-security-architect"}]}