Azure Security Manager: ISMS & Zero Trust Lead (Remote)

Giesecke+Devrient; Málaga; Híbrido; EUR 70.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work option

Continuous training

Canteen with meals

Diversity & inclusion

Descripción de la vacante

Giesecke+Devrient's G+D Mobile Security in Málaga, Spain, seeks a Security Manager Azure to lead our cloud security governance and ISMS effort. You will act as trusted advisor to engineering, product, and compliance, owning risk assessments and audits across Azure and AWS environments.

You will drive Zero Trust controls, manage Defender for Cloud findings, and collaborate with DevSecOps to ensure secure design and compliant operations, reporting to senior stakeholders.

Formación

• At least 5 years in information security, risk, audit, or compliance, with 3+ years in security management or cloud governance.
• Strong understanding of ISO 27001 and modern security frameworks.
• Solid knowledge of security controls (IAM, third‑party risk, secure SDLC, cloud).
• Ability to challenge and support engineering teams constructively.
• Solid knowledge of Azure and AWS security controls.
• Understanding of Zero Trust architecture and shared responsibility in cloud models.
• Familiarity with IaC security practices: secrets management and pipeline approvals.
• Experience producing security metrics and governance reports for execs.
• Excellent analytical, documentation, and problem‑solving skills.
• Fluent English; German or Spanish a plus.

Responsabilidades

• Own and improve ISMS, policies, and governance lifecycle.
• Advise engineering, product, compliance, and customer teams.
• Lead security risk assessments and maintain risk register.
• Ensure ISO 27001:2022 and other standards compliance.
• Coordinate audits and assessments; ensure evidence readiness.
• Lead vendor risk programs to strengthen supply chain.
• Review product changes for governance and secure design.
• Collaborate with Security Architect to align DevSecOps and cloud practices.
• Own Azure security posture and Defender for Cloud findings.
• Manage cross-platform governance tasks and CI/CD security gates.
• Produce assurance reporting tied to risk register and remediation.

Conocimientos

Information security

Risk management

Security governance

ISO 27001

Cloud security

DevSecOps

Zero Trust

IAM

Audit

Stakeholder communication

English fluency

Herramientas

Azure Security Center

AWS Security Hub

Defender for Cloud

Entra ID

PIM (Privileged Identity Management)

IaC security tools

CI/CD security tools

Descripción del empleo

Giesecke+Devrient's G+D Mobile Security in Málaga, Spain, seeks a Security Manager Azure to lead our cloud security governance and ISMS effort. You will act as trusted advisor to engineering, product, and compliance, owning risk assessments and audits across Azure and AWS environments.

You will drive Zero Trust controls, manage Defender for Cloud findings, and collaborate with DevSecOps to ensure secure design and compliant operations, reporting to senior stakeholders.