Help shape and strengthen the security foundation at VELUX

We are looking for a Cybersecurity Architect to join our cybersecurity team and play a key role in shaping how security is built into our technology landscape.

This is a role for someone with broad cybersecurity knowledge and strong architectural thinking combined with deeperexpertisein eitherIdentity and Access Management (IAM)orDevSecOps.

You will help define the technical direction for cybersecurity support major strategic initiatives and work closely with colleagues across IT and the business to ensure security is built in from the start.

You will be part of a team working to strengthen cybersecurity acrossthe VELUX Groupthrough clear architecture principles practical guidance and continuous improvement. The role combines long-term roadmap ownership with hands-on involvement in strategic projects and technical decision-making.

What you will be doing

As Cybersecurity Architect you will help define and drive the technical cybersecurity roadmap and ensure that security architecture supports both business priorities and the wider cybersecurity strategy.

Your responsibilities will include:

• Owning and driving the technical cybersecurity roadmap

• Acting as a cybersecurity subject matter expert in strategic initiatives and transformationprogrammes such as cloud securityinitiatives and regulatory implementation projects

• Defining andmaintainingsecurity architecture principles standards and reference patterns

• Providingarchitectural guidance across key cybersecurity domains including identity cloud application infrastructure data and network security

• Bringing deepexpertisein either:

• IAM including identity architecture authenticationauthorisation privileged access federation and lifecycle management or

• DevSecOps including secure software delivery CI/CD security automation code scanning secrets management and infrastructure-as-code security

• Contributing to the development of the wider cybersecurity strategy and helping turn strategy into actionable technical plans

• Driving technical cybersecurity improvement initiatives across theorganisation

• Working closely with enterprise architects infrastructure teams cloud teams application teams and risk and compliance stakeholders to embed security by design

• Reviewing solution designs and major change initiatives to ensure alignment with security architecture principles

• Monitoring trends threats andnew technologiesto continuously improve theorganisationssecurity capabilities

• Maintaining clear architecture documentation roadmaps and design standards

What we are looking for

We are looking for someone who can combine strategic thinking with practical architectural guidance.

You should be comfortable working across a broad cybersecurity landscape while also bringing deeperexpertisein either IAM orDevSecOps.

We expect that you bring:

• Experience working in cybersecurity with a strong background in security architecture security engineering or a similar technical role

• Broad knowledge across multiple cybersecurity domains and the ability to assess end-to-end security impacts across systems platforms and applications

• Experience designing and implementing security architecture in cloud environments ideally Azure

• Understanding of cybersecurity frameworks standards and relevant regulatory requirements(e.g.Cyber Resilience Act)

• Experience supporting major technology or transformationprogrammesas a trusted security advisor

• Ability to define target-state architectures roadmaps and transition plans

• Understanding of secure architecture principles across cloud hybrid infrastructure enterprise applications APIs and data platforms

• Strong communicationand stakeholder management skills with the ability to work across both technical and non-technical teams

• A pragmatic and risk-based approach to security decision-making