IT Security Architect

Bruker is a global leader in analytical instrumentation and solutions for life sciences, materials research, and industrial applications. We empower scientists and engineers to make breakthrough discoveries and innovations. At Bruker, we value integrity, innovation, and collaboration, and we are committed to maintaining a secure and resilient IT environment.

Why Join Bruker?

Work with cutting-edge technologies in a mission-driven organization.
• Competitive compensation and benefits.
• Opportunities for professional growth and development.
• Collaborative and inclusive work culture.

Position Summary

We are seeking a highly skilled and experienced IT Security Architect to design, implement, and maintain robust security architectures that protect Bruker's global IT infrastructure, data, and digital assets. This role will be instrumental in shaping our cybersecurity strategy and ensuring compliance with industry standards and regulations.

Key Responsibilities

• Security Architecture Design: Develop and maintain enterprise security architecture frameworks aligned with business and IT strategies.
• Risk Assessment: Identify security risks and vulnerabilities across systems, networks, and applications; recommend mitigation strategies.
• Technology Evaluation: Evaluate and recommend security technologies, tools, and platforms to enhance Bruker's security posture.
• Policy & Standards Development: Create and enforce security policies, standards, and procedures.
• Collaboration: Work closely with IT, DevOps, and business units to integrate security into system designs and development lifecycles.
• Incident Response: Support incident response planning and execution; assist in forensic investigations and root cause analysis.
• Compliance & Governance: Ensure compliance with GDPR, ISO 27001, NIST, and other relevant standards and regulations.
• Security Awareness: Promote security awareness and training across the organization.

• Education & Experience:
• Master's degree in Computer Science, Cybersecurity, Information Systems, or a related field.
• Minimum of 8 years of progressive experience in IT security, with at least 3 years in a security architecture or engineering role.
• Technical Expertise:
• Deep understanding of enterprise security architecture frameworks (e.g., SABSA, TOGAF, NIST CSF).
• Proficiency in designing secure systems across on-premises, cloud (AWS, Azure, GCP), and hybrid environments.
• Strong grasp of encryption technologies, PKI, secure coding practices, and data loss prevention (DLP).
• Experience with security technologies such as firewalls, IDS/IPS, SIEM, endpoint protection, and vulnerability scanners.
• Familiarity with container security (e.g., Docker, Kubernetes), microservices, and API security.
• Compliance & Governance:
• Knowledge of global regulatory requirements including GDPR, HIPAA, SOX, and ISO/IEC 27001.
• Experience conducting audits, risk assessments, and gap analyses.
• Certifications (Preferred):
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• SABSA Certified Architect
• AWS/Azure Security Specialty
• CEH (Certified Ethical Hacker)
• Soft Skills:
• Strong analytical and problem-solving abilities.
• Excellent communication and presentation skills, with the ability to translate technical concepts for non-technical stakeholders.
• Proven ability to lead cross-functional teams and influence decision-making.
• High attention to detail and a proactive approach to identifying and mitigating risks.
• Additional Assets:
• Experience in the life sciences, manufacturing, or high-tech industries.
• Familiarity with DevSecOps practices and CI/CD pipeline integration.
• Multilingual capabilities or experience working in a global enterprise environment.

At Bruker, base salary is part of our total compensation. The estimated base salary range for this full-time position is between $95,400.00/yr. and $169,000.00/yr. and provides an opportunity to progress as you grow and develop within a role.The base salary for the role will depend on a several job-related factors, including, but not limited to education, training, experience, the geographic location of the successful candidate, skills, competencies, job-related knowledge and travel requirements for this position. Full-time employees may also be eligible for a performance-related incentive in addition to a full range of benefits including 401(k) with company match, an employee stock purchase plan, medical and dental plans, life insurance, short-term and long-term disability insurance, employee assistance program and paid time off including vacation, sick time and holidays, and more.

Bruker is an equal-opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

Certain positions at Bruker require compliance with export control laws and as a result, all interviewed candidates for all positions will be screened pre-interview to determine their eligibility in light of export control restrictions.

#LI-KIP1