Senior IT Security Architect_XC

Role Summary

We are looking for a Senior Information Security Architect with deep professional experience in IT security (especially cloud security) and business application architecture. You will design and drive security strategies for our self-developed business applications and infrastructure, covering on-premises and multi-cloud environments.

You will act as a bridge between business application architecture and security - understanding how applications are built, how they fit into business processes, and how to match security with business needs from a suitability, rationality and cost-effectiveness perspective. You will work closely with internal development teams, product owners and business stakeholders.

This position requires more than 10 years of comprehensive experience in cloud security, IT security and business application architecture.

Responsibilities

• Serves as a trusted advisor in the areas of architecture and security, providing guidance to development teams, product owners, and business management.
• Communicate complex technical concepts clearly to technical and non-technical personnel.

IT Security and Governance

• Responsible for IT security strategy and roadmap, translating business risks and compliance requirements into executable plans.
• Lead security risk assessment, vulnerability management and incident response.
• Design security controls for on-premises and hybrid environments.
• Establish safety indicators and KPIs and report to senior management.
• Define the security governance framework for your application portfolio.

Cloud security

• Design and maintain a secure cloud architecture (prioritizing Azure, but also covering AWS/GCP and domestic cloud platforms such as Tencent Cloud and Alibaba Cloud), including IAM, network security, encryption, workload protection and governance.
• Lead cloud security assessments, architecture reviews, and threat modeling of business applications.
• Develop cloud security standards, policies, and protective guardrails for application teams.
• Promote infrastructure security practices and CI/CD pipeline integration.

business application architecture

• Responsible for the business application architecture of the self-developed system to ensure business applicability, technical rationality and cost-effectiveness.
• Lead architectural reviews of internally developed applications - including new projects, major enhancements, and platform migrations.
• Establish application architecture patterns, reference models and reusable components to speed up delivery and reduce duplication.
• Drive application rationalization initiatives—evaluate the existing application portfolio, identify redundancies, and pursue consolidation and modernization opportunities.

Requirements

Basic requirements

• Bachelor's or master's degree in computer science, IT security, software engineering or related major.
• More than 10 years of progressive work experience in the fields of IT security, cloud security, and business application architecture.
• Have practical and successful experience in designing and leading business application architecture for self-developed systems.
• Priority is given to holding the following certifications: CISSP, CISP, CISM, CCSP, TOGAF, Azure/AWS security special certification.
• Skills and Expertise

Cloud security

• Strong secure cloud architecture expertise on Azure (preferred) and/or AWS/GCP.
• Hands-on experience with IAM, RBAC, network security, encryption, key management and key custody.
• Familiar with cloud-native security tools (such as Defender for Cloud, Sentinel, Security Hub).

business application architecture

• Proficient in business application architecture: multi-layer design, microservices, distributed systems, API design, event-driven architecture, and integration patterns.
• Experience in application rationalization and modernization projects.
• In-depth understanding of Agile and DevOps practices.
• Practical knowledge of development platforms (Java, .NET, Python, Node.js).
• Familiar with enterprise architecture frameworks (such as TOGAF).
• Possess good business acumen - understand business processes and be able to translate requirements into technical solutions.

IT Security and Operations

• Extensive understanding of IT security areas: vulnerability management, threat detection, terminal security, email/Web security, backup/disaster recovery.
• Experience in SIEM (Sentinel, Splunk), SOAR and incident response.
• Network security: segmentation isolation, zero trust, VPN, next-generation firewall (NGFW).

leadership

• Strong stakeholder management and consulting skills.
• Ability to drive initiatives and influence outcomes without direct jurisdiction.
• Excellent problem-solving and analytical skills.
• Fluent professional English.
• Ability to work autonomously and manage multiple priority tasks.

priority conditions

• Applicants with experience in the automotive industry or ADAS are preferred.
• Familiar with Kubernetes, service mesh, and cloud native architecture.
• Understand AI/ML integration patterns in business applications.
• Familiar with FinOps and cloud cost optimization.
• Have working experience in multinational companies.
• Applicants familiar with Bosch internal standards will be given priority.