Senior Cybersecurity Specialist

Senior Cybersecurity Specialist

Senior Cybersecurity Specialist, Ferrovial Corporate US, LLC, Austin, TX. Develop a cybersecurity practice at CINTRA USA (CINTRA) by defining and implementing a comprehensive cybersecurity strategy. Provide security for CINTRA IT/OT systems by identifying vulnerabilities across software, hardware, networks, data centers, and cloud environments, and designing regulation-compliant strategies and defensive controls to protect against attacks and threats. Negotiate contracts, conditions, and terms related to the cybersecurity baseline for subsidiaries and joint ventures. Ensure the deployment, maintenance, and continuous improvement of appropriate security measures and controls for products and services developed through digital and technology initiatives. Manage and monitor security projects, including initiating and launching benchmarks and proof-of-concepts. Oversee cybersecurity vendors, develop policies, oversee audits (including SOC 2 and PCI), and collaborate across departments to strengthen the security posture and streamline GRC processes, including the use of GRC tools.

Requirements

• Bachelor’s degree or foreign equivalent degree in Computer Science, Engineering (any), Information Technology or a related field, and four (4) years of related work experience.
• Must have four (4) years of experience with/in:
• Managing complex cybersecurity environments and incidents throughout the full lifecycle;
• Deploying, maintaining, and assessing ISO 27001 and NIST CSF environments;
• Identifying and addressing adherence to and risks derived from legal and compliance requirements, including Government Risk and Compliance (GRC);
• Defining, deploying, monitoring, evaluating, testing, and improving security architectures, risk models, infrastructures, and services within corporate and international settings;
• Architecture models including SASE and Zero Trust;
• Modern enterprise architectures and their integration within Internet Open Architecture models, including industrial systems (ICS), IoT, and OT/IT environments;
• Services provided by major as-a-service providers, including Amazon AWS, Azure, Bluemix, Google Cloud, Cloudera, and Atlas/Mongo; and
• Developing, planning, maintaining, and testing Business Continuity Plans, including Disaster Recovery Plan.