Security Architect - Freelance

Context

• A leading company in the railway industry is looking for a Security Architect for an assignment.

• The role supports the organization’s security architecture and risk management activities in a context of critical services and vital infrastructures.

Missions

• Security architecture
  ◦ Design, formalize, and evolve the target security architecture, integrating requirements from the early stages of project design (Security by Design, Privacy by Design).
  ◦ Define security architecture standards, models, and principles in alignment with the organization’s strategic directions.
  ◦ Integrate key security domains (network, cloud, IT/OT/IoT, ICAM, data, cryptography, etc.) into a coherent and modular vision.
  ◦ Lead or contribute to security intake processes and architecture committees to ensure alignment of solutions with the target architecture.

• Risk management
  ◦ Perform technical and architectural risk assessments on projects, infrastructures, business applications, support applications, and industrial systems.
  ◦ Identify threats, vulnerabilities, and attack scenarios, and recommend appropriate mitigation measures.
  ◦ Maintain a consolidated and up-to-date view of risks across various domains, including ERP systems (SAP), IT/OT/IoT environments, the use of Artificial Intelligence, access management, and inter-application data flows.

• Standards, compliance, and governance
  ◦ Contribute to drafting and updating technical security standards, ensuring their alignment with legal requirements and reference frameworks (CyFun, ISO 27001, IEC 62443, NIST, NIS2, GDPR, etc.).
  ◦ Contribute to security governance committees to guide technical decisions.
  ◦ Ensure consistency of architectural principles with internal standards and maintain traceability of decisions.
  ◦ Participate in coordination with competent authorities when necessary.

• Support and advisory
  ◦ Assist project, IT, OT, and business teams in integrating security requirements, including in complex contexts (SAP integration, IT/OT convergence, cloud solutions, access management).
  ◦ Provide support during design phases, solution analysis, or procurement processes (RFI/RFP).
  ◦ Ensure the alignment of critical architectural components (ICAM, detection and response solutions, cryptography, etc.) with overall security objectives and the IT roadmap.

• Continuous improvement, security, and technology
  ◦ Monitor the evolution of threats, technologies, regulations, and governance models, identifying innovation opportunities.
  ◦ Propose continuous improvements to strengthen the security posture, including detection and response, logging, resilience, and identity management.
  ◦ Promote modeling, reusability, and consistency of architectural components.