Cyber Security Enterprise Architect

How to contribute to our vision

This role is a replacement for business continuity, filling a critical position as a Cyber Security Enterprise Architect within the central Enterprise Architecture team. As an Expert Professional, the position is responsible for defining, co-developing, and leading the implementation of the cybersecurity strategy and architecture for Siemens Energy on a global scale. To fulfill this strategic objective, the role is structured around three core pillars: cyber security strategy and architecture governance, secure digital transformation (incl. cloud security, OT/IT convergence, and AI security) and Technical Leadership & Solution Oversight, which entails providing expert guidance on security implementation and acting as a top-tier authority on complex security matters. Given the focus on strategic design and expert-level guidance, the ideal candidate will be a recognized master in cybersecurity architecture. This requires extensive experience in experience designing security architectures across both Enterprise IT and Operational Technology (OT) environments in critical infrastructure, utilities, manufacturing, or energy sectors. It also requires deep knowledge of cloud security (AWS/Azure), and proven expertise in areas like risk management, SIEM, and Identity and Access Management. Advanced professional certifications are expected.

What You Need To Make a Difference

• 40% Enterprise Security Strategy & Architecture
• Analyze emerging cyber security trends, threats, regulatory requirements, and technology advancements to continuously evolve the enterprise security architecture and strengthen the organization's cyber resilience.
• Define and communicate the target Cyber Security Architecture vision across the enterprise, ensuring alignment with business strategy, digital transformation initiatives, regulatory obligations, and risk appetite
• Develop and maintain the Cyber Security Architecture roadmap, assessing current-state capabilities and defining target-state architectures, transition plans, and investment priorities.
• stablish enterprise-wide security architecture principles, standards, guardrails, reference architectures, and design patterns covering applications, infrastructure, cloud platforms, data platforms, AI solutions, Operational Technology (OT), and IoT environments.
• rive the integration of cyber security requirements into enterprise architecture governance, technology portfolio management, and investment decision processes.
  
• 30% Secure Digital Transformation
• Drive security-by-design and privacy-by-design across all business and technology initiatives, ensuring cyber security requirements are integrated into solution delivery from inception to deployment.
• Lead architecture assessments and evaluate alternative technology solutions, balancing business value, security risk, operational resilience, scalability, compliance, and cost.
• Partner with Enterprise Architects, Solution Architects, Security Operations, Infrastructure, Application Development, Data, AI, and OT teams to ensure consistent implementation of security architecture standards.
• Define the security architecture framework for cloud, hybrid-cloud, and edge computing environments, including identity, network security, workload protection, encryption, and monitoring capabilities.
• Shape the strategic direction for Identity and Access Management (IAM), Zero Trust Architecture, Privileged Access Management (PAM), Cyber Defense, and Security Monitoring capabilities.
  
• 30% Technical Leadership & Solution Oversight
• Serve as the senior technical authority and escalation point for complex security incidents, investigations, and architectural challenges.
• Support Executive Management and Digital Transformation leadership by providing strategic guidance on cyber security risks, mitigation strategies, and technology investment priorities.
• Ensure alignment with relevant industry standards and frameworks such as ISO 27001, NIST Cybersecurity Framework, IEC 62443, NIS2, CIS Controls, and Zero Trust principles.
• Mentor and coach architects and technology leaders on cyber security best practices, architecture standards, and emerging security technologies.
• Drive the integration of cyber security requirements into enterprise architecture governance, technology portfolio management, and investment decision processes.
  
  
  

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
  
  
  

• Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Extensive experience (Minimum 12+ years) in IT security, with a significant focus on enterprise architecture and strategic security design.
• Proven experience in a senior or lead architect role, developing and implementing security strategies for a large, global organization.
  
  
  

• Technical Security Expertise
• Security Architecture
• Identity & Access Management
• Zero Trust Architecture
• Cloud Security
• Application Security
• Data Security
• OT/ Industrial Security
• Cyber Resilience & Disaster Recovery
• AI Security & Responsible AI
• Security Monitoring & Threat Detection
• Cloud knowledge (AWS/ Azure) and their security services
• Understanding security frameworks and regulatory requirements: ISO 27001, NIST, Cybersecurity Framework IEC 62443, NIS2, CIS Controls, GDPR, Zero Trust principles
  
• Leadership & Communication
• Excellent stakeholder management and communication skills with the ability to translate complex technical topics into business-focused recommendations and executive decision material.
• Strong consulting, influencing, and facilitation skills, with the ability to drive alignment across business leaders, technology teams, and external partners.
• Proven ability to lead cross-functional teams and mentor architects within a global enterprise environment.
• Open-minded, collaborative, and passionate about continuous learning and technology innovation.