Information Security Architect – Intermediate Level

We are looking for an Information Security Architect (Intermediate Level) with 10+ years of experience to support security architecture and consulting activities across enterprise IT systems. The role involves contributing to threat modeling, reviewing system changes, conducting vendor risk assessments, and supporting security concept creation.

You will work closely with global stakeholders, especially German teams, and must be comfortable managing discussions, ensuring structure, clarity, and compliance with EU data protection regulations.

Key Responsibilities

1. Support information gathering across systems: data flows, interfaces, regulations, system boundaries, etc.
2. Contribute to Threat Modeling (Beginner level) using STRIDE.
3. Participate in Threat Mitigation Management (Beginner level) for identified risks.
4. Support in the creation and review of Security Concepts.
5. Information Security & Risk Consulting
6. Conduct review of system changes to identify security impacts or risks.
7. Perform Third-Party Vendor Risk Assessments and document findings.
8. Provide security consulting (Intermediate level) for internal teams and projects.
9. Work with global stakeholders and follow structured communication practices.

Qualification & Certification

Education:

1. Bachelors or Masters degree in Computer Science, IT, Cybersecurity, or related field.
2. Preferred Certifications:
3. ISO 27001 / ISO 27002
4. CISA, CISM, CRISC (preferred)
5. Cloud Security Certifications (Azure/AWS/GCP – good to have)

Skills Required

1. Threat Modeling (using STRIDE – basic level)
2. Threat Mitigation Planning (basic level)
3. Security Concept Documentation
4. Information Security Consulting
5. Third-Party Vendor Risk Assessments
6. Change Review & Risk Evaluation
7. Knowledge of EU Data Protection Regulations
8. Strong communication & stakeholder management (especially with German teams)
9. Understanding of multi-cloud/SaaS environments (Salesforce experience preferred)