General specifications

• Place of work: Brussels

• Desired start date: 01-01-2027

• End date: 31-12-2031

• Working regime: Full-time

• Estimated number of hours: 9,000

• Experience: 10+ years (Expert)

Task description

Define, design and validate the target architectures for client’s mission-

critical systems, covering IT, OT, Cloud and railway environments. Ensure the integration of the princi

ples of Cyber Resilience by Design, Security by Design, Zero Trust and Operational Resilience across all strategic projects and programmes.

Carry out business impact analyses, risk analyses and architecture studies to identify vulnerabilities, c

ritical dependencies and single points of failure. Ensure that architectures and solutions comply with

applicable regulations, standards and frameworks (NIS2, CER, CRA, ISO 27001, ISO 22301, IEC 62443,

EN 50701, etc.).

Support project teams, architects, asset owners and suppliers in defining and implementing architect

ure, security, availability and resilience requirements. Assess technological solutions, proposed archit

ectures and suppliers from the perspective of business criticality, cybersecurity, operational resilienc

e and lifecycle.

Ensure that architectures are consistent with client’s strategic objectives, service continuity requirem

ents and defined criticality levels (Mission Critical, Business Critical, Business Essential and Business S

upport).

Contribute to enterprise architecture governance, architecture reviews, decision-

making committees and the continuous improvement of the organisation’s cyber resilience maturity.

Promote standardisation, simplification and the management of technological dependencies to stren

gthen the robustness and sustainability of critical services. Ensure traceability between business nee

ds, business capabilities, services, assets, security controls and regulatory requirements in order to guarantee consistent and auditable risk management.

Technical skills

• Knowledge of Dutch or French (C1: advanced proficiency in complex situations).

• Knowledge of English: understanding, writing and reading (B2: upper-intermediate level).

• Expertise in IT/OT/Railway cybersecurity and secure architectures (L2: at least 2 years of experience).

• Mastery of Safety by Design and Security by Design principles (L3: at least 5 years of experience).

• Knowledge of standards and regulations: NIS2, ISO 27001, IEC 62443, CIS, NIST (L3: at least 5 years of experience).

• Risk analysis and vulnerability management (L3: at least 5 years of experience).

• Knowledge of cloud environments, networks, systems, OT and critical infrastructure (L3: at least 5 years of experience).

• Ability to assess technical solutions and architectures from a security perspective (L3: at least 5 years of experience).

On-call service

• Available for on-call service: Available for on-call service

• Desired frequency: Not specified

• Comments on on-call service: Not specified

Administrative specifications

• Maximum number of pages per CV: 10