Security Architect (Hybrid role in Barcelona)

Required experience:

• 5+ years of experience working in a specialist IT/technical/architect role.
• 3+ years of experience in an information security-focused role.
• Experience working in a multi-vendor environment.
• Experience securing and working with enterprise-grade systems and applications.
• Good IT security background, including knowledge of security architectures, cloud security, network security, information security best practices, and best-practice operating models and processes.

Preferred experience:

• 2+ years delivering security risk assessments in a global IT environment.
• Detailed technical knowledge relating to hardware and software.
• Experience performing threat modelling using recognised methodologies (e.g. STRIDE).
• Experience conducting architecture risk assessments and security design reviews.
• Experience supporting security assurance activities, including penetration testing and findings remediation.
• Familiarity with NIST Cybersecurity Framework, CIS Controls and ISO 27001.
• Experience operating within formal architecture governance processes.
• Knowledge of principles and practices involved in the development and maintenance of software solutions, architectures and service delivery.
• Experience with regulatory compliance and information security management frameworks (e.g., ISO 27001, NIST, GDPR).
• Experience deploying and operating information security risk management processes.
• Familiarity with standard IT process and control frameworks, such as ITIL, IT4IT, COBIT and TOGAF.

Skills:

• Great communication skills, capable of engaging effectively from engineering levels to C-Level executives.
• Analytical thinking and problem-solving abilities, including troubleshooting and adapting to significant project changes.
• Proficiency in working under pressure and managing multiple priorities.
• Proactive and forward-thinking attitude towards cybersecurity.
• Risk assessment and risk management.
• Knowledge of project and program management methodologies.
• Basic understanding of corporate finance and commercial awareness.
• Calm and assertive in challenging situations.
• Creativity in formulating alternative approaches to problems.
• Ability to work effectively on large, global projects in diverse and multi-cultural environments.
• Commitment to achieving quality with a rational and organised approach to tasks.

Qualifications:

Current or working towards:

• No formal qualifications are required.
• Education to first-degree level or equivalent in a technology, cybersecurity or a related field is preferred.
• A foundational security certification, such as CC, Security+, SSCP, CCSP, or equivalent, is desirable.
• Strong knowledge of core Microsoft cloud technologies and services, including Azure IaaS and Microsoft 365.

Mandatory Attitudes and Behaviours:

• Cohesive and supportive across all business groups.
• Cultural awareness when working with global teams.
• Collaborative approach to working across teams and the wider organisation.
• Analytical and lateral thinker, with a very strong attention to detail.
• Proactive and pragmatic - able to balance competing pressures and influences.
• Customer focused and able to enthuse and motivate teams and individuals.
• Persuasive and professional communication style, with the ability to influence business decisions.