Digital Security Architect

at  Securitas

ABOUT SECURITAS IT

Securitas vision is to become the Intelligent Protective Services Partner through being client centric, data driven, and people focused. Our protective services help make your world a safer place. Securitas IT is a global function that creates the capabilities of a modern and powerful IT technology needed to fulfil Securitas business strategy. We develop and invest in technology and people. Our 700 co-workers support digital products and services for clients and transforming and protecting our existing IT landscape, making sure our 345,000 colleagues all over the world can work efficiently in a modern IT environment.
Securitas is implementing new common global Services based on both Microsoft Azure and Office365 with the addition of private cloud based on VMware technology. Securitas is also transforming its global network, business application landscape and data management capabilities. In the coming years, Securitas will also work with IT consolidation to drive synergies and modernize our IT infrastructure and collaboration platforms.

JOB DESCRIPTION

During the project lifecycle, you are responsible for performing the following activities:

• Understand the business & IT context and guide the project stakeholders in classifying key data and system assets.
• Identify Digital Security Risks through the review of the architecture and through threat modelling. In some cases, a logical & conceptual architecture will need to be made by yourself in order to be able to perform a Digital Security Risk review.
• Advise IT asset - and Business Owner stakeholders on the Digital Security Risk posture and the possible remediations.
• Propose a set of Security Controls and requirements.
• Design the Security Controls and provide guidance to the IT Project stakeholders for the design and building. Strive for standardization and a maximum reuse of existing security services.
• Assist in defining the security requirements for a sourcing track and assist in the Digital Security evaluation.
• Define the Digital Security Test plan by formalizing the threat & test cases to verify systems are securely built as designed.
• Follow-up and support in a proactive manner the different remediation plans defined in the initiatives under your responsibility.
• Create transparent communication and as required, reports on the current state of the initiatives from the digital security perspective.

Together with the CDSO, the enterprise security architect, the other ‘Digital Security Capability Managers, you will work with architects (enterprise- & solution-), engineers, security officers and service owners and - managers throughout the global organization to ensure that Digital Security is embedded in the different projects.

YOUR PROFILE AND QUALIFICATIONS

To succeed in this role, we believe that you need to be a pro-active people-centric individual. You have the capability to switch between different levels of abstraction easily. Your style of communication is engaging and educational. You are comfortable giving expert advice to various levels in the organization and you actively seek input from your expert peers.

You are familiar with:

• Security frameworks such as SABSA, NIST, ISO27K, CIS20, ISACA, etc.
• Hybrid Cloud architectures and the security thereof, service-oriented IT operating models, IT Application Security, Identity & Access Management and Infrastructure security.

And You have:

• Experience in evaluating IT architectures from a Digital Security and Compliance angle.
• You have worked previously in large organizations in an open, multi-cultural environment.

• Understand the business & IT context and guide the project stakeholders in classifying key data and system assets.
• Identify Digital Security Risks through the review of the architecture and through threat modelling. In some cases, a logical & conceptual architecture will need to be made by yourself in order to be able to perform a Digital Security Risk review.
• Advise IT asset - and Business Owner stakeholders on the Digital Security Risk posture and the possible remediations.
• Propose a set of Security Controls and requirements.
• Design the Security Controls and provide guidance to the IT Project stakeholders for the design and building. Strive for standardization and a maximum reuse of existing security services.
• Assist in defining the security requirements for a sourcing track and assist in the Digital Security evaluation.
• Define the Digital Security Test plan by formalizing the threat & test cases to verify systems are securely built as designed.
• Follow-up and support in a proactive manner the different remediation plans defined in the initiatives under your responsibility.
• Create transparent communication and as required, reports on the current state of the initiatives from the digital security perspective