Cybersecurity Architect (All Gender)

Description

The role sits within the company's teams and makes sure that technical and technology choices for IT and business projects follow the organisation's security strategy.

You serve as the technical security authority for the company's corporate information system architectures, define security models, and help shape architectures that align with the IT strategy and security policies.

The work is high-stakes and can combine operational and personnel safety with production concerns for group companies, strategic sectors and external clients.

Responsibilities

• Design: set the security architecture direction for information systems so it matches business goals, risk-based security objectives and the company's overall security strategy.
• Design: define and apply reference architecture models.
• Design: help turn security policies into operational security standards.
• Recommendation: support projects in designing architectures, specifying settings and defining technical security requirements.
• Recommendation: advise on technical solutions, recommend secure information system architectures, and ensure compliance with regulations where they apply.
• Recommendation: review existing architectures regularly, find gaps and propose security improvements.
• Recommendation: define security testing and validation approaches and follow up on the resulting recommendations.
• Advice: guide how existing security building blocks are used and combined.
• Advice: assess security risks from new technologies or new information systems.
• Advice: monitor technology trends and factor them into security architecture decisions.
• Communication: raise the security maturity of information systems together with technical architects and urban planners.
• Communication: work with technical security specialists to build a complete view of defensive IT security.
• Communication: explain technical topics clearly to technical and non-technical colleagues.

Requirements

• Hold an engineering school degree or equivalent in cybersecurity, or have substantial cybersecurity experience. Either route is acceptable.
• Have at least 5 years in security, including major projects in several sectors such as transport, space, pharmaceuticals and banking.
• Know how to apply the principles of defensive security and work independently.
• Show strong skills in secure architecture design, PKI, cloud, cryptography, identity and access rights management (IAM), network security and communication protocols, and operating system security.
• Optional: skills in design methods, systems engineering and security, security product configuration and hardening, or systems auditability and incident management.
• Work well across functions, willingly help less experienced colleagues, and contribute to the Security Architecture Center of Competencies.
• Be curious, dynamic, adaptable, and able to take ownership of your missions.
• Be developing leadership, self-confidence and a habit of sharing knowledge.
• Be developing an interest in security standards and regulations and how they apply to your work.
• Have an advanced level of English, which is mandatory for working in the company's multicultural environment.

Conditions

Permanent contract at the Professional experience level, in the Cyber Security job family.

Based in Getafe, 13 km south of Madrid, a major technology and industrial hub with strong aerospace, defence and high-tech sectors.

Flexible working arrangements are supported wherever possible.

Hiring steps: an application file completed through your recruitment officer, a technical interview with the manager, an interview with the recruitment officer, and personalised feedback afterwards.

You must be aware of potential compliance risks and act with integrity.

The company welcomes applicants of all backgrounds and does not ask for any payment during recruitment.

Benefits

• Join technical communities that build team spirit, share knowledge and help turn ideas into practice.
• Receive attention to your technical development, with support for your ideas and for passing knowledge to peers and building technical know-how.