Senior Security Architect / Project Management

Job type:Permanent
Town/City:Munich
Region:Bayern
Sector:Cyber Security
Client Company Type:In-House
Job ref:10905
Post Date:October 13, 2026

About the Role

Senior Security Architect / Project Management

The Opportunity

How often do your security architectures actually get built the way you designed them?

In many architect roles, you hand over a target design and hope the delivery teams follow it. Here, you design the architecture and lead the projects that put it into practice. You see your work through from concept to rollout.

Security is becoming central to this group's products, infrastructure and operations. That means your work is visible at management and steering committee level, with the backing to make it happen.

You'll also be joining while the group builds out its security capability. The standards, guidelines and governance are still taking shape, and you'll have a hand in writing them.

The Role

You'll split your time between architecture and delivery. In practice, that means:

  • Designing and evolving security architecture across IT, infrastructure and connected technical environments, in line with group strategy
  • Leading security projects end to end, owning scope, timelines, budget and stakeholder alignment
  • Turning regulatory and industry requirements into practical technical concepts and roadmaps
  • Running risk and threat assessments and defining the controls that follow
  • Acting as the senior security advisor to engineering and development teams, so security is built in from the start rather than bolted on later
  • Coordinating internal teams, international sites and external partners
  • Reporting on progress, risk and security posture to management and steering committees
  • Shaping security standards, guidelines and governance across the organisation

Your remit covers classic IT and the connected, safety-critical systems the group's products rely on. If you're interested in where IT security meets operational technology, this is where the hard problems are.

The Company

Our client is an international industrial technology group. Its engineered systems run in safety-critical environments around the world, so security failures have real-world consequences, and the business treats security accordingly.

The group is investing in its security function now. Joining at this stage means you help define the approach rather than inherit one, working across engineering, IT and the business with a remit that crosses borders.

What You'll Need

  • Several years' experience in security architecture
  • A track record of leading complex technical projects in an international environment
  • Hands-on knowledge of network, cloud and infrastructure security, with some exposure to operational or embedded technology
  • Working knowledge of relevant security standards, frameworks and risk management methods
  • Fluent English

How to Apply

Your CV doesn't need to be up to date. Send what you have, or just give the MAM Gruppe team a call for a

More Jobs from this Recruiter

Munich, Bayern

Senior Security Architect / Project Management

Senior Security Architect / Project Management The Opportunity How often do your security architectures actually get built the way you designed them? In many architect roles, you hand over a target design and hope the delivery teams follow it. Here, you design the architecture and lead the projects that put it into practice. You see your work through from concept to rollout. Security is becoming central to this group's products, infrastructure and operations. That means your work is visible at management and steering committee level, with the backing to make it happen. You'll also be joining while the group builds out its security capability. The standards, guidelines and governance are still taking shape, and you'll have a hand in writing them. The Role You'll split your time between architecture and delivery. In practice, that means: Designing and evolving security architecture across IT, infrastructure and connected technical environments, in line with group strategy Leading security projects end to end, owning scope, timelines, budget and stakeholder alignment Turning regulatory and industry requirements into practical technical concepts and roadmaps Running risk and threat assessments and defining the controls that follow Acting as the senior security advisor to engineering and development teams, so security is built in from the start rather than bolted on later Coordinating internal teams, international sites and external partners Reporting on progress, risk and security posture to management and steering committees Shaping security standards, guidelines and governance across the organisation Your remit covers classic IT and the connected, safety-critical systems the group's products rely on. If you're interested in where IT security meets operational technology, this is where the hard problems are. The Company Our client is an international industrial technology group. Its engineered systems run in safety-critical environments around the world, so security failures have real-world consequences, and the business treats security accordingly. The group is investing in its security function now. Joining at this stage means you help define the approach rather than inherit one, working across engineering, IT and the business with a remit that crosses borders. What You'll Need Several years' experience in security architecture A track record of leading complex technical projects in an international environment Hands-on knowledge of network, cloud and infrastructure security, with some exposure to operational or embedded technology Working knowledge of relevant security standards, frameworks and risk management methods Fluent English How to Apply Your CV doesn't need to be up to date. Send what you have, or just give the MAM Gruppe team a call for a
Learn More
Hamburg, Hamburg

IT Risk Manager

IT Risk Manager The Opportunity Tired of writing risk reports nobody actually reads? This role is built for someone who wants risk management to mean something, not just tick a box. You'll join an established international business to bring order and follow-through to IT risk across a large, complex organisation. The frameworks exist. What's needed is someone who makes sure they're used, understood, and acted on. The Role Maintain a practical framework for identifying, tracking, and closing out IT-related risk Keep risk categorisation and control standards consistent across teams Turn scattered risk data into reporting leadership can actually use Chase open issues until they have an owner and a resolution, not just a log entry Partner with recovery planning colleagues so IT can bounce back fast when things break Work alongside security, infrastructure, and delivery teams to catch risk early in projects Act as the go-to contact for risk-related questions across the business Support audits and regulatory reviews, keeping documentation audit-ready The Company Our client is an established international business with a large, complex IT organisation. Risk and continuity sit high on the agenda here, and this role has real visibility with senior stakeholders as a result. You'll be operating across borders and functions, working with people who take risk seriously rather than treating it as paperwork. What You'll Need 3+ years focused on IT risk, operational risk, or continuity, within a 5+ year IT career Practical knowledge of recognised risk and control frameworks Familiarity with continuity or disaster recovery standards Exposure to ITIL-based ways of working Experience operating in international, cross-functional settings Fluent English How to Apply Your CV doesn't need to be up to date. Send what you have, or just give us a call.
Learn More
Mannheim, Baden-Württemberg

SOC Lead

SOC Lead Ready to Build Something That Doesn't Exist Yet? Most SOC roles ask you to maintain. This one asks you to create. A global industrial technology business, over 175 years old and still innovating, has made cyber security a boardroom priority. They're building their CDC from the ground up, and they need a Lead who can architect the entire function: strategy, processes, automation, tooling, and a team of analysts to back it up. This is a rare opportunity to put your name on something. No inherited processes. No legacy decisions to unpick. Just a clear mandate, executive backing, and the freedom to do it right. What You'll Be Doing You'll take end-to-end ownership of the CDC — defining how it operates, how it scales, and how it matures. Day to day, that means: Designing and owning all CDC processes, SOPs, runbooks, and playbooks — building from scratch, not from a template Leading an automation-first approach: implementing and continuously improving SOAR capabilities to cut manual workload and sharpen response times Developing the CDC roadmap with a clear eye on regulatory requirements including NIS2 and ISO 27001 Acting as incident manager for critical events — staying strategic, not getting pulled into the weeds Integrating OT security requirements into centralised monitoring alongside IT environments Selecting, optimising, and managing the security technology stack — SIEM, SOAR, XDR Leading, mentoring, and developing a team of 3–5 security analysts Reporting CDC performance to senior leadership through meaningful KPIs (MTTD, MTTR) The Company You'll be joining a global industrial technology business with a 175-year track record of innovation. The organisation operates across IT and OT environments at scale — which means the security challenges here are genuinely complex, and the investment behind this function is real. Cyber security has moved firmly onto the executive agenda. You'll have the organisational weight behind you to build this properly. What You'll Need Solid experience in a SOC, CDC, or Information Security leadership environment A process-first mindset — you think in workflows, not just incidents Hands-on experience with SOAR platforms and an instinct for automation Familiarity with SIEM and XDR tooling Working knowledge of relevant frameworks and standards — NIST, SANS, ISO/IEC 27001, NIS2 Experience leading and developing security analysts Business-level German and strong English — you'll need both Comfortable with on-call responsibilities and major incident availability How to Apply You can apply directly through this page, or reach out to the consultant listed in this advert if you'd prefer a conversation first. Your CV doesn't need to be polished or up to date — send what you have. If this sounds like the right move, we'd rather hear from you early than not at all.
Learn More
Frankfurt, Hessen

Product Owner Cyber Hygiene

Vice Director Cyber Hygiene  Location: Frankfurt Our client is seeking a Vice Director Cyber Hygiene to support the operational and strategic development of its cyber hygiene and vulnerability management function. This role focuses on vulnerability scanning, tooling integration and the coordination of security operations within a complex environment. Key Responsibilities: Oversee day-to-day cyber hygiene and vulnerability management activities. Support vulnerability scanning operations and exposure management initiatives. Coordinate the integration and optimisation of security tooling and platforms. Collaborate with internal stakeholders on operational and security-related topics. Support the implementation of strategic security initiatives across the function. Contribute to operational governance, reporting and continuous improvement activities. Assist with the development and scaling of security operations capabilities. Your Profile: Strong experience within vulnerability management or cyber hygiene environments. Hands-on knowledge of Tenable One or comparable vulnerability management platforms. Understanding of security operations, scanning technologies and exposure management. Experience working within large or regulated environments would be advantageous. Strong communication and stakeholder management skills. Independent and solution-oriented working style. Fluent German and English language skills. What’s on Offer? Senior position within an international security environment. Exposure to large-scale cyber security and transformation initiatives. Collaborative and modern working culture. Long-term development and progression opportunities.
Learn More

Latest Blogs

View all blogs