Cyber Security Solution Architect (FlexHub) (m/f/diverse)

The company

Commerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.

As part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey, and we are looking for a Cyber Security Solution Architect in our FlexHub team.

We are seeking a highly skilled Cyber Security Solution Architect to design, implement, and manage secure IT solutions that safeguard our organization’s digital assets, critical systems, and data. As a Cyber Security Solution Architect, you will play a key role in identifying vulnerabilities, designing effective countermeasures, and ensuring the enterprise architecture aligns with industry’s best practices and compliance standards.

As a Solution Architect you will focus on designing and implementing robust security architectures and solutions to enhance the bank’s monitoring capabilities, strengthen detection mechanisms, and support the overall effort to identify and respond to potential cyber threats effectively.

Your tasks:

• Cybersecurity Architecture Design: Develop and maintain secure and scalable architecture solutions that align with regulatory requirements and business goals. Translate business requirements into technical solutions;
• Technical Leadership: Provide strategic guidance and technical leadership for implementing cybersecurity solutions, policies, and protocols;
• Security Solution Development: Work together with the Product Owners to improve or implement their security solutions, including SIEM, Exposure Management, Cloud Security, Threat Intelligence platforms, Threat Hunting, data protection mechanisms and others;
• Cloud Security: Oversee cloud-based infrastructures, ensuring DevSecOps integration, and compliance with cloud security standards (CIS benchmarks, NIST Cybersecurity Framework);
• Security incident monitoring and response: Collaborate with the Security Incident Response manager on establishing frameworks for incident detection, response and recovery;
• Collaboration: Work closely with the Cyber defense teams and other IT departments for the implementation of cybersecurity solutions;
• Technology Analysis: Stay updated on the latest cybersecurity technologies, trends, and threats to recommend innovative solutions to mitigate risks.

Your profile:

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field;
• 10+ years of relevant experience in cybersecurity, including 5+ years in architecture, design and solution implementation positions, preferably within the Banking and Finance industry;
• Expertise in secure architecture frameworks, tools, and methodologies, such as Zero Trust and Defense-in-depth architectures, NIST CSF, ISO 27001 standard;
• Experience with industry frameworks such as MITRE ATT&CK, Cyber Kill-chain;
• Hands-on experience with security technologies such as SIEMs, EDRs, Threat Intelligence and Vulnerability management platforms, IAM and encryption Solutions;
• Strong knowledge of cloud security principles, tools, and platforms (Azure, Google Cloud);
• Knowledge of DevSecOps practices and experience implementing security within CI/CD pipelines;
• Excellent analytical, problem-solving, and communication skills;
• Relevant certifications such as CISSP, CISSP-ISSAP, CISM, CEH, Google/Azure;
• Security Certifications are highly desirable;
• Outstanding communication skills in English.

In return, we offer:

• Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work from abroad and work-from-home opportunities;
• Luxury package of additional health and dental insurance;
• Food vouchers in the amount of 128 BGN monthly;
• 6 additional annual days off for exceptional circumstances;
• Employee assistance program for psychological, financial and legal consultations;
• Multisport card;
• Annual contribution of 300 BGN net per child for a summer camp/school/kindergarten for children up to age of 15;
• Possibilities for building career-advancing skills by covering training/certification courses and conferences based on individual learning and development needs, access to an online learning platform;
• Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;
• Friendly and supportive multicultural environment, open to new opinions and ideas.

Commerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.

Challenge accepted? Apply now with your up-to-date CV in English!

Only shortlisted candidates will be invited to interview.