Senior Security Architect - Koninklijke Philips N.V.

Lead and support product and information security for (IoT) products, apps, and cloud services across Philips.

Your role:

• Lead and support the realization of product security deliverables during the development of medical and consumer (IoT) products, apps, and cloud-based services across Philips.
• This includes security and privacy by design, threat modeling, risk management, and verification activities, conform the Quality Management System, and engagement with both business and corporate stakeholders.
• Support the deployment, maintenance, and improvement of organizational information security policies and controls, including preparation for and follow-up on internal and external audits.
• Contribute to the continuous improvement of security policies, procedures, and frameworks across both product security and organizational information security, applying up-to-date knowledge of cybersecurity threats, standards, and guidance.
• Foster strong (cross-functional) collaboration with peers across Philips to align on initiatives, drive adoption, and ensure integrated security across domains.

With a growing presence in cardiology, oncology, and women's health, Philips operates in the areas of Imaging Systems, Patient Care & Clinical Informatics, Home Healthcare and Customer Services. Philips combines its clinical expertise and human insights to create innovative solutions across the continuum of care, in partnership with clinicians and our customers, to provide better value and expand access to care for millions. Our teams are working hard every day to improve patient outcomes all the way from disease prevention and screening to diagnosis, treatment, therapy monitoring, and disease management. Irrespective of whether the care cycle takes the patient from doctor's office to hospital or hospital to home, or simply from one medical department to another, Philips Healthcare's unique medical solutions are designed to optimize the quality and flow of patient information and clinical decision making.

You will be employed by YER and seconded to our client. We offer:

• Good employee benefits
• Challenging assignments
• Excellent guidance from your consultant and YER's back office
• Development opportunities, including the YER Talent Development Programme with a personal coach
• Intensive support for international candidates (including Dutch lessons, tax-return and accommodation assistance)
• Cooperative and results and relationship-driven
• Friendly atmosphere and open culture
• Community/network with other technology professionals from a variety of multinationals
• Events and master classes with interesting speakers and attractive companies

You're the right fit if:

• 10-15+ years of experience in security architecture or engineering roles, with at least 5 years focused on product, app, and cloud security for complex systems, involving embedded software, electronics, cloud services, and wireless standards (e.g. BLE, 4G/5G, Wi-Fi, NFC). Experience in healthcare or regulated environments is a strong plus.
• Expertise in threat modeling, security architecture, risk management, cryptography. Familiarity with secure software practices (e.g. secure boot, OTA, SBOM). Hands-on experience with relevant standards and frameworks such as ISO/IEC 27001, NIST CSF, IEC 62443, OWASP, and ideally IEC 62304, ISO 14971, or EU/FDA cybersecurity and guidance for medical devices and privacy regulations.
• Bachelor’s or Master’s degree in Computer Science, Electrical/Software Engineering, or related technical field. Preferred certifications include CISSP, CSSLP, HCISPP, CEH, and ISO 27001 Lead Implementer.
• Strong communicator with the ability to engage with both technical and non-technical stakeholders across R&D, IT, and corporate functions. Proven ability to lead security initiatives, coach teams, and translate technical security risks into requirements. Comfortable working in global, cross-functional, and multicultural environments.