IT Security Architect

About the role

As an IT Security Architect at Bosal Group in Querétaro, you will define and embed security architecture standards across the organization, leading a risk‑driven vulnerability management program. You will ensure that security is built into infrastructure, applications and cloud services while systematically identifying and reducing technical risks.

Key responsibilities

• Define and maintain security architecture principles, standards and reference designs.
• Perform security design reviews for infrastructure, network changes, applications and cloud services.
• Establish baseline security requirements for Windows and Linux servers, network segmentation and identity & access management.
• Own the end‑to‑end vulnerability management program, including scanning strategy, risk‑based prioritisation, remediation SLAs and progress tracking.
• Act as the security authority for technical risk decisions, including compensating controls and formal risk acceptance.
• Provide input and evidence for TISAX assessments related to technical security controls.
• Advise projects and teams on secure architecture, remediation strategies and security best practices.
• Ensure architecture and vulnerability management controls are effective, measurable and audit‑ready.

Required profile

• 5+ years of experience in security architecture or security engineering.
• Hands‑on experience building and operating vulnerability management programs.
• Proven collaboration with infrastructure, network and application teams.
• Entrepreneurial mindset and desire to invest in your career.

Required skills

• Security architecture methodologies and best practices.
• Vulnerability management platforms (e.g., Tenable).
• Windows and Linux security fundamentals.
• Network security and identity & access management concepts.
• Risk assessment and threat modelling techniques.
• Relevant security certifications (e.g., CISSP, CISM) – strong asset.

What we offer

• Inspiring work environment within a global Tier 1 automotive supplier.
• Competitive remuneration package with additional benefits.