It Security Architect (Santiago de Querétaro)

Overview

Bosal Group BOSAL is a Dutch privately owned company, mainly known as an integral Tier 1 automotive supplier, in business since ****. We employ about **** people in 16 production facilities, with the largest ones in Czechia, Mexico, Turkey, Brasil, US and South Africa. Our corporate research center is based in Belgium, and we run 5 other R&D satellites worldwide. Currently we are looking for an IT Security Architect in Querétaro (Mexico).

Responsibilities

• Define and maintain security architecture principles, standards, and reference designs.
• Perform security design reviews for infrastructure, network changes, applications and cloud services.
• Define baseline security requirements for Windows and Linux servers, network segmentation, and identity and access management.
• Own the vulnerability management program end-to-end, including defining the scanning strategy, risk-based prioritization using asset criticality, and establishing remediation SLAs and progress tracking.
• Act as the security authority for technical risk decisions, including compensating controls and formal risk acceptance.
• Provide input and supporting evidence for TISAX assessments related to technical security controls.
• Advise projects and teams on secure architecture, remediation strategies, and security best practices.
• Ensure architecture and vulnerability management controls are effective, measurable, and ready for internal and external audits.

Profile

• Skills : Strong knowledge of security architecture methodologies and best practices.
• Experience with vulnerability management platforms (e.g. Tenable or similar solutions).
• Solid understanding of Windows and Linux security.
• Knowledge of network and identity security fundamentals.
• Experience with risk assessment and threat modeling techniques.
• Relevant security certifications are considered a strong asset.
• Experience : 5+ years of experience in security architecture or security engineering.
• Hands-on experience building and operating vulnerability management programs.
• Experience working in hybrid environments (on-premises and cloud).
• Proven collaboration with infrastructure, network and application teams to implement secure solutions.

Benefits

We offer an inspiring job in a unique environment with an interesting remuneration package and additional benefits.