Senior Cybersecurity Specialist

Ferrovial Services Australia; Sydney; On-site; AUD 200,000 - 257,000; Full time

Job summary

Ferrovial is hiring a Senior Cybersecurity Specialist in Austin, TX to build a cybersecurity practice for CINTRA USA. The role defines security strategy, protects IT/OT environments, negotiates baseline terms for subsidiaries, and drives security improvements across digital initiatives.

Responsibilities include managing security projects, vendor oversight, and audits (SOC 2, PCI), while strengthening governance, risk, and compliance across the organization.

Qualifications

• Experience managing complex cybersecurity environments end-to-end.
• Knowledge of ISO 27001 and NIST CSF frameworks and audits.
• Ability to align security with legal and regulatory requirements (GRC).
• Proven skills in security architectures for hybrid cloud environments.

Responsibilities

• Develop and implement a comprehensive cybersecurity strategy for CINTRA USA.
• Oversee security for IT/OT systems across software, hardware, networks, and data centers.
• Negotiate cybersecurity contracts and terms for subsidiaries and ventures.
• Manage security projects, vendor oversight, and audits (SOC 2 and PCI).
• Strengthen GRC processes and utilize GRC tools across departments.
• Define and improve security architectures including SASE and Zero Trust.

Skills

Cybersecurity governance

ISO 27001

NIST CSF

GRC management

SASE and Zero Trust

Cloud security architecture

Vendor management

Disaster Recovery planning

Tools

AWS

Azure

Google Cloud

Bluemix

Cloudera

Atlas/Mongo

Job description

Join Ferrovial: Where Innovation Meets Opportunity

Are you ready to elevate your career with a global leader in infrastructure solving complex problems and generating a positive outcome on people’s lives? At Ferrovial, we are not just a company; we are a community of innovators and trailblazers. Ferrovial is also leading the development of the New Terminal One at JFK International Airport. Ferrovial shares trade under the ticker symbol FER on two stock markets: Nasdaq in the U.S. (Nasdaq100 Index) and the Spanish Stock Exchanges (IBEX 35). Ferrovial is included in globally recognized sustainability indices such as the Dow Jones Best-in-Class Index. We operate in more than 15 countries and have a workforce of over 22,000 professionals worldwide. Ferrovial’s activity is carried out through our business units, including Highways, Airports, Construction, and Energy.

Our Corporate organization oversees business activities, providing strategic planning, communication, legal, finance and human resources services to the business units. As a member of our corporate organization, you will have a broad view of our company, further supporting your career development.

Why Ferrovial?

• Global presence, local impact: Be part of a company that is shaping the future of infrastructure worldwide, with challenging roles and projects that make a real difference.
• Collaborative excellence: Work alongside talented professionals in a collaborative environment where your ideas and contributions are valued.
• Inclusive Culture: Thrive in an innovative and respectful workplace that values every voice, celebrates what makes us unique and turns differences into innovation.
• Career growth: Benefit from global and cross-business unit mobility, with development processes designed to ensure your professional growth.
• Compelling benefits and employee wellbeing: Enjoy a comprehensive benefits package that rewards your hard work and dedication and take advantage of initiatives designed to support your physical and psychological health.
• Productivity tools: Utilize cutting-edge tools like Microsoft Copilot to enhance your productivity and efficiency.

Job Description:

Senior Cybersecurity Specialist, Ferrovial Corporate US, LLC, Austin, TX. Develop a cybersecurity practice at CINTRA USA (CINTRA) by defining and implementing a comprehensive cybersecurity strategy. Provide security for CINTRA IT/OT systems by identifying vulnerabilities across software, hardware, networks, data centers, and cloud environments, and designing regulation-compliant strategies and defensive controls to protect against attacks and threats. Negotiate contracts, conditions, and terms related to the cybersecurity baseline for subsidiaries and joint ventures. Ensure the deployment, maintenance, and continuous improvement of appropriate security measures and controls for products and services developed through digital and technology initiatives. Manage and monitor security projects, including initiating and launching benchmarks and proof-of-concepts. Oversee cybersecurity vendors, develop policies, oversee audits (including SOC 2 and PCI), and collaborate across departments to

strengthen the security posture and streamline GRC processes, including the use of GRC tools.

40 hrs/week, Mon-Fri, 8:30 a.m. – 5:30 p.m.

REQUIREMENTS:

• Managing complex cybersecurity environments and incidents throughout the full lifecycle;
• Deploying, maintaining, and assessing ISO 27001 and NIST CSF environments;
• Identifying and addressing adherence to and risks derived from legal and compliance requirements, including Government Risk and Compliance (GRC);
• Defining, deploying, monitoring, evaluating, testing, and improving security architectures, risk models, infrastructures, and services within corporate and international settings;
• Architecture models including SASE and Zero Trust;
• Modern enterprise architectures and their integration within Internet Open Architecture models, including industrial systems (ICS), IoT, and OT/IT environments;
• Services provided by major *aaS providers, including Amazon AWS, Azure, Bluemix, Google Cloud, Cloudera, and Atlas/Mongo;
• Developing, planning, maintaining, and testing Business Continuity Plans, including Disaster Recovery Plan.

Seize the challenge. Move the world together! Innovative, creative, respectful, and diverse are some of the ways we describe ourselves. We are motivated by challenges, and we collaborate across our business units to move the world together. Your journey to a fulfilling career starts here!

Ferrovial is an equal opportunity employer. We treat all jobs applications equally, regardless of gender, color, race, ethnicity, religion, national origin, age, disability, pregnancy, sexual orientation, gender identity and expression, covered veteran status or protected genetic information (each, a “Protected Class”), or any other protected class in accordance with applicable laws.

#WeAreFerrovial