Portugal
ambi.
ARGO
Security Architect
Portugal
Lisbon, Portugal
Kubernetes
Automatic translation. Check the original.
About the opportunity
Client: A financial institution with a long-standing and consolidated presence in the Portuguese market, serving private individuals, companies, and organizations of various sizes. Its operations are based on a proximity model, with strong ties to local communities and businesses.
Mission
As a Security Architect, your goal is to support the Management in the design, definition, and governance of security architectures, ensuring that all technological solutions are conceived based on the principle of Security by design and by default, aligned with the organization's ICT and Risk strategy, internal regulations, and regulatory compliance.
Key Responsibilities
- Define, implement, and evolve reference security architectures;
- Evaluate application solutions and infrastructure regarding security and technological risk;
- Support technological decisions and strategic roadmaps;
- Ensure the adoption of "Security by design and by default" and "zero trust" principles;
- Define and ensure compliance with security standards and best practices (encryption, access management, secure connectivity, data storage, cloud security, etc.);
- Monitor and advise on the implementation of new technologies from a security perspective;
- Ensure alignment and compliance with internal and legal regulations (DORA, ISO27001, etc.);
- Issue security opinions on projects and new technologies based on risk;
- Support the definition of models for application evolution;
- Provide support and assistance for audits (internal and external).
Requirements
Technical Requirements (Hard Skills)
- More than 5 years of experience in IT
- Minimum of 3/5 years of experience in cybersecurity, with at least 2 years focused on security architectures;
- Consolidated experience in defining, implementing, and evolving secure solutions in cloud environments (particularly Azure):
- Access management;
- Data encryption (in transit, at rest, and in use);
- Resource segregation
- Secrets and certificate management
- Security in containers and Kubernetes;
- Security in APIs;
- Network and application security;
- Perimeter security;
- Knowledge and experience in major ICT security and risk frameworks;
Behavioral Competencies (Soft Skills)
- Critical and strategic thinking, oriented toward problem-solving;
- Influential communication with technical and executive stakeholders;
- Risk-based decision-making;
- Informal leadership;
- Synthesis capability;
Other valued requirements
- DevSecOps (CI/CD pipelines and code analysis tools (SAST and DAST));
- Vulnerability management;
- Threat modeling;
- Knowledge and mastery of the Microsoft security solutions portfolio.
Valued certifications (not mandatory)
- CISSP;
- CCSP;
- SABSA / TOGAF;
- ISSAP;
- CISM/CRISC.
Location and work arrangement: 5x per month in the Lisbon metropolitan area
Note: All candidates who meet the necessary requirements will be contacted within 15 days by the team
More opportunities with one profile
Want to be considered for more roles without repeating the whole process? Create your profile and be found by companies using Nort.
Create my profile
