Senior Cybersecurity Specialist

Ferrovial•Austin, TX

8d•Onsite

About The Position

The Senior Cybersecurity Specialist will develop a cybersecurity practice at CINTRA USA by defining and implementing a comprehensive cybersecurity strategy. The role provides security for CINTRA’s IT and OT systems by identifying vulnerabilities across software, hardware, networks, data centers, and cloud environments, and designing regulation-compliant strategies and defensive controls to protect against attacks and threats. The specialist negotiates contracts, conditions, and terms related to the cybersecurity baseline for subsidiaries and joint ventures. They ensure the deployment, maintenance, and continuous improvement of security measures and controls for products and services developed through digital and technology initiatives. The role also manages and monitors security projects, including initiating and launching benchmarks and proof-of-concepts; oversees cybersecurity vendors; develops policies; oversees audits, including SOC 2 and PCI; and collaborates across departments to strengthen security and streamline GRC processes, including through GRC tools.

Requirements

Bachelor’s degree or foreign equivalent in Computer Science, Engineering (any), Information Technology, or a related field.
Four years of related work experience.
Four years of experience managing complex cybersecurity environments and incidents throughout the full lifecycle.
Four years of experience deploying, maintaining, and assessing ISO 27001 and NIST CSF environments.
Four years of experience identifying and addressing adherence to and risks derived from legal and compliance requirements, including GRC.
Four years of experience defining, deploying, monitoring, evaluating, testing, and improving security architectures, risk models, infrastructures, and services within corporate and international settings.
Four years of experience with architecture models including SASE and Zero Trust.
Four years of experience with modern enterprise architectures and their integration within Internet Open Architecture models, including industrial systems (ICS), IoT, and OT/IT environments.
Four years of experience with services provided by major aaS providers, including Amazon AWS, Azure, Bluemix, Google Cloud, Cloudera, and Atlas/Mongo.
Four years of experience developing, planning, maintaining, and testing Business Continuity Plans, including Disaster Recovery Plans.

Responsibilities

Develop a cybersecurity practice at CINTRA USA by defining and implementing a comprehensive cybersecurity strategy.
Protect CINTRA IT and OT systems by identifying vulnerabilities in software, hardware, networks, data centers, and cloud environments and designing compliant defensive controls.
Negotiate contracts, conditions, and terms for the cybersecurity baseline applicable to subsidiaries and joint ventures.
Ensure deployment, maintenance, and continual improvement of security measures and controls for products and services developed through digital and technology initiatives.
Manage and monitor security projects, including initiating and launching benchmarks and proof-of-concepts.
Oversee cybersecurity vendors and develop policies.
Oversee audits, including SOC 2 and PCI audits.
Collaborate across departments to strengthen security posture and streamline GRC processes, including use of GRC tools.
Manage complex cybersecurity environments and incidents throughout their full lifecycle.
Deploy, maintain, and assess ISO 27001 and NIST CSF environments.
Identify and address compliance with and risks arising from legal and compliance requirements, including GRC.
Define, deploy, monitor, evaluate, test, and improve security architectures, risk models, infrastructures, and services in corporate and international settings.
Develop, plan, maintain, and test Business Continuity Plans, including Disaster Recovery Plans.