Senior Cybersecurity Architect & Strategy Lead

Ferrovial Services Australia; Sydney; On-site; AUD 200,000 - 257,000; Full time

Job summary

Ferrovial is hiring a Senior Cybersecurity Specialist in Austin, TX to build a cybersecurity practice for CINTRA USA. The role defines security strategy, protects IT/OT environments, negotiates baseline terms for subsidiaries, and drives security improvements across digital initiatives.

Responsibilities include managing security projects, vendor oversight, and audits (SOC 2, PCI), while strengthening governance, risk, and compliance across the organization.

Qualifications

• Experience managing complex cybersecurity environments end-to-end.
• Knowledge of ISO 27001 and NIST CSF frameworks and audits.
• Ability to align security with legal and regulatory requirements (GRC).
• Proven skills in security architectures for hybrid cloud environments.

Responsibilities

• Develop and implement a comprehensive cybersecurity strategy for CINTRA USA.
• Oversee security for IT/OT systems across software, hardware, networks, and data centers.
• Negotiate cybersecurity contracts and terms for subsidiaries and ventures.
• Manage security projects, vendor oversight, and audits (SOC 2 and PCI).
• Strengthen GRC processes and utilize GRC tools across departments.
• Define and improve security architectures including SASE and Zero Trust.

Skills

Cybersecurity governance

ISO 27001

NIST CSF

GRC management

SASE and Zero Trust

Cloud security architecture

Vendor management

Disaster Recovery planning

Tools

AWS

Azure

Google Cloud

Bluemix

Cloudera

Atlas/Mongo

Job description

Ferrovial is hiring a Senior Cybersecurity Specialist in Austin, TX to build a cybersecurity practice for CINTRA USA. The role defines security strategy, protects IT/OT environments, negotiates baseline terms for subsidiaries, and drives security improvements across digital initiatives.

Responsibilities include managing security projects, vendor oversight, and audits (SOC 2, PCI), while strengthening governance, risk, and compliance across the organization.