Cybersecurity Architect (Confirmed Enterprise Profile)

About the role

The Confirmed Enterprise Cybersecurity Architect acts as the technical security authority on corporate information system architectures, ensuring that the technical and technological choices of IT and business projects respect the organization's security strategy. The role defines security models, supports architecture development and works on high-stakes projects for the group and its external clients. The position is based in Getafe, near Madrid.

Key responsibilities

• Establish the IS security architecture strategy in line with business strategy, risk analysis and the company's security objectives
• Define and apply reference models for architectures and contribute to turning security policies into operational standards
• Support architecture design, specify settings, define technical security requirements and advise on technical solutions and secure architectures
• Review the existing architecture, identify gaps and recommend improvements, including security testing and validation strategies
• Advise on the use of existing security components and on security issues raised by new technologies or systems
• Work with technical architects and security specialists to raise security maturity and share technical knowledge across functions

Required profile

• Degree in cybersecurity (or equivalent) or significant cybersecurity experience
• At least 5 years of experience in security, on major projects across several sectors such as transport, space, pharmaceuticals or banking
• Able to work independently and cross-functionally, mentoring juniors and contributing to the Security Architecture Center of Competencies
• Advanced English is mandatory

Required skills

• Defensive security principles
• Secure architecture design, PKI, cloud, cryptography, IAM, network security and OS security
• Plus: design methods, system engineering and security, hardening, auditability and incident management