Senior IT Expert (Enterprise Security Architect)

Senior IT Expert (Enterprise Security Architect)
Frankfurt

Reference2014-353-EXT

Function

The European Central Bank (ECB) is seeking candidates for the position of Enterprise Security Architect in the Security and Architecture Division of its Directorate General Information Systems (DG/IS).

The Security and Architecture Division develops, implements and maintains IS security and architecture policies, frameworks, blueprints and methodologies, and provides IS security and architecture services for ECB/ESCB projects and operations.

The successful applicant will be entrusted with the following main tasks:

Enterprise architecture:

?as a member of the Enterprise Architecture team, he/she will be charged with participating in the development and maintenance of the enterprise architecture framework and other key models and documents;
?proactively contributing to the establishment and consolidation of the enterprise architecture function, discipline and the methods used in various organisational processes;

Security architecture:

?developing and maintaining an integrated and coherent security architecture strategy that is aligned with the security policy and embedded in the overall enterprise architecture strategy;
?developing and maintaining security requirements, principles, target state models and roadmaps in the context of strategic architecture development assignments;
?collaborating with other enterprise and solution architects, with IT security experts and with other technical specialists to integrate security controls into a cohesive IT architecture;
?contributing to review activities by recommending and approving suitable actions to address security findings;
?establishing close cooperation with the IS Security Governance team to ensure that the security architecture strategy complies with policy; providing an input to policy-making and risk management activities;
?driving and influencing the implementation and evolution over time of technical solutions serving a security purpose;
?supporting the Architecture Steering Board by representing the needs of the security architecture;

Project support:

?identifying and prioritising security infrastructure projects and investments, including via the organisation?s project portfolio management process;
?supporting projects in the identification and design of the most suitable controls and measures for meeting security requirements;
?reviewing and endorsing project documentation;
?acting as a solution architect, drawing on the expertise of the entire Enterprise Architecture team, and going beyond security aspects if necessary;
?providing security requirements and guidance for procurement procedures and technology selection activities.

Qualifications and experience

Applicants must have the following knowledge and competencies:
?a master?s degree, preferably in information technology or a related discipline;
?twelve or more years of experience in the field of information technology, acquired after completing university education;
?at least four years of experience as a enterprise security architect, working within an information security or extemporise architecture team, or as a consultant
?a mastery of generally accepted information security principles, methods, reference frameworks and patterns;
?a thorough understanding of current as well as emerging security threats, and experience in designing security architecture that enables an organisation to prevent, detect and respond to threats;
?knowledge of (and, preferably, experience with) all relevant aspects of the following areas:
?data centre physical security;
?network layout, segregation and segmentation;
?network perimeter and monitoring controls;
?host-based security controls, including end-point security solutions;
?security event monitoring and logging platforms;
?encryption technologies;
?vulnerability management platforms;
?secure software development, security testing methods and tools;
?cloud security;
?knowledge of (and, preferably, experience with) identity governance, including:
?role-based access control concepts and their design and implementation;
?directory architectures;
?identity and access management infrastructures;
?identity and permission management, as well as the related policies, processes and procedures;
?strong authentication mechanisms and technologies;
?PKI and digital certificates management;
?a working knowledge of ISO 27001;
?experience in using security risk assessment methodologies.

The following would be considered an asset:

?knowledge of, and experience in, the following IT areas:
?digital rights management;
?malware analysis solutions and appliances;
?a working knowledge of enterprise architecture frameworks such as TOGAF 9;
?a valid industry certification in information security and/or enterprise architecture;
?experience with one or more enterprise architecture tools;
?work experience in a high-security public sector environment as well as in the financial services sector.
?an advanced command of English with proven experience in quality drafting of documents for both decision-makers and technical audiences;
?an advanced command of at least one other official language of the EU;
?proficiency in the use of MS Office, in particular Word, Excel, PowerPoint, and Visio.

Competencies

The successful candidate will have the following behavioural competencies:

?possesses strong analytical skills and is able to conceptualise complex, multidimensional
?problems in ways that facilitate the identification of possible solutions;
?produces compelling high-quality deliverables tailored to the needs of the target audience which are effective from the point of view of communication;
?communicates effectively at all levels ? with management staff and all relevant stakeholders (technical and non-technical) - both within and outside the organisation;
?exerts influence both directly and indirectly in order to communicate ideas and implement the most suitable approach;
?can negotiate skilfully in difficult situations involving both internal and external parties and establish mutually agreeable solutions;
?operates with a large degree of autonomy; manages his/her own workload independently, providing status updates, liaising with others and escalating issues as appropriate;
?takes initiative; can gather necessary knowledge and information independently and is able to remain motivated, even during challenging assignments.

Closing Date for Applications: 23.01.201
Further Information

Three-year fixed-term contract, with possible conversion to a contract of indefinite duration subject to individual performance and organisational needs.

How to apply

Applications are to be made in English and submitted using our online application form.

Further information on the ECB's conditions of employment for fixed-term positions can be found at