Enterprise Cyber Security Architect - Zero Trust

Responsibilities

After having learned and assimilated the Zero Trust concepts and their application within the BNP Paribas Zero Trust framework (approach, principles, patterns, objectives, pillars, etc...), the applicant will be appointed on different activities :

- Participate into the Zero trust framework and strategy adaptation including feedbacks from practical implementation, evolution of needs and market maturity.

- Understand BNPP's identified Use Cases and potentially identify relevant new ones, their maturity levels to be reached and related technical/nontechnical streams to be planned.

- Establish high-level architecture patterns needed to the Zero Trust strategy and co-define Group transversal architecture standards.

- Assist IT production / operations teams (Telecom, Security, IAM, ) to operationalize the Zero Trust Strategy (identify gaps, impacts, deliverables, outcome projects for each transformation step).

- Design robustness and Zero trust compliance assessments.

- Contribute to an urbanization approach and propose new or adapted architecture standards and rules.

- Help the project leader in supervising and following up the Zero Trust Strategy (feed Sponsors committee with risks, problems, activities, ).

Background & Required Skills

Background

- Between 7 and 12 years of experience or more in cyber security field

- Proven senior architecture activities such as :

o Drives and designs new and strategic security initiatives for emerging technologies

o Assesses, envisions, plans, designs, and oversees the implementation of security capabilities across company platforms, systems, and applications

o Defines security requirements, build architecture blueprints, and conducts reviews of systems, platforms, and applications to identify security risks

- Proven experience with cross-cultural & international working environment.

- Advanced communication skills (strong writing, editing, presenting).

- Ability to articulate technical concepts to non-technical stakeholders.

- Ability to lead through accountability with delegated responsibilities and to manage conflicting priorities and multiple tasks.

- In-depth understanding of cybersecurity standard frameworks such as NIST, ISO27002, etc.

- Demonstrate a positive motivated attitude. Rigorous and an eye for detail.

- Strong knowledge and understanding of current trends of cybersecurity.

- Industry certifications are preferred: CISSP, CISM, CRISC, etc.

Technical Skills

Enterprise Architecture

3 - Expert

ZT solutions (ZTNA, policy engine, proxy SAAS, CASB,)

2 - Practice

Cybersecurity concepts & information security solution architectures

3 - Expert

IAM (Governance, processes and tools - IGA, Access management, ...)

2 - Practice

Risk Knowledge & Analysis

2 - Practice

transversal security background (Network, System, Applications, )

2 - Practice

Behavioural Skills

Communication Skills - Oral & Written

3 - Expert

Ability to work in project mode

3 - Expert

Ability to Analyze, Synthetize /Simplify

3 - Expert

Ability to lead a meeting, seminar, committee

3 - Expert

Risk Knowledge & Analysis

2 - Practice

Transversal Security background (Network, System, Applications, )

2 - Practice

Languages

English

3 - Expert

French

1 - Notions