Security Architect

Socium - Teams Done Differently; Madrid; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working 3 days in Madrid

Career progression

Job summary

Socium - Teams Done Differently is seeking a Security Architect in Madrid to own the security architecture across products, cloud and infrastructure. You will be the go-to authority for secure design, working with CISO and engineering leaders to translate business needs into scalable security designs.

You will lead security reviews, define roadmaps, and ensure compliance with GDPR, ISO 27001 and other standards while guiding engineers to bake security in from the start.

Qualifications

• Significant security experience with architecture focus.
• Deep cloud security knowledge across AWS/Azure/GCP.
• Familiar with threat modelling methods and risk frameworks.
• Ability to balance security with business needs and regulatory demands.

Responsibilities

• Define and maintain security architecture across cloud, apps and infra.
• Lead security design reviews and threat modelling for new products.
• Shape security roadmap and align with business goals and risk appetite.
• Design secure cloud landing zones, IAM, network segmentation and data protection.
• Ensure compliance with DORA, ISO 27001, GDPR, NIS2 and support audits.
• Assess security technologies and vendors for best-fit solutions.
• Mentor Security Engineers and embed security by design in engineering teams.
• Explain risk clearly to senior stakeholders and leadership.

Skills

Cloud security architecture

Threat modelling

Zero Trust

IAM & encryption

Security frameworks (NIST ISO)

Tools

Terraform

Kubernetes security

Cloud security tools

Job description

Madrid (Hybrid - 3 days in the office) | Permanent

About the company

Our client is an established European financial technology group whose platforms help banks run their investment businesses. They work with a large base of financial institutions across Europe, and their products handle sensitive client and financial data every day, so security is central to what they deliver. As they modernise and scale their platforms, they’re hiring a Security Architect in Madrid to set the direction for how security is designed into everything they build.

The role

This is a senior, strategic role with real technical depth. You’ll own the security architecture across the company’s products, cloud and infrastructure, and you’ll be the go-to authority for engineering and product teams on secure design. You’ll work closely with the CISO, the platform and engineering leads, and risk and compliance colleagues. Your job is to turn business and regulatory requirements into practical, scalable security designs.

What you’ll be doing

• Defining and maintaining the security architecture, standards and reference patterns across cloud, application and infrastructure environments
• Leading security design reviews and threat modelling for new products, major changes and third-party integrations
• Shaping the security roadmap and setting priorities in line with business goals and risk appetite
• Designing secure cloud landing zones, network segmentation, identity and access models (including Zero Trust principles), and data protection controls
• Making sure architecture meets financial services regulatory requirements (e.g. DORA, ISO 27001, GDPR, NIS2) and supporting audits and client due diligence
• Assessing and selecting security technologies and vendors
• Guiding and mentoring Security Engineers and influencing engineering teams to build security in from the start
• Explaining technical risk clearly to senior stakeholders and leadership

What we’re looking for

• Significant experience in security, with a proven track record as a Security Architect or in a senior security engineering role with strong design responsibility
• Deep knowledge of cloud security architecture on AWS, Azure or GCP, plus experience with hybrid environments
• Strong understanding of application security, secure SDLC and API security
• Expertise in IAM, PKI and encryption, network security and Zero Trust concepts
• Experience with threat modelling methodologies (e.g. STRIDE) and security frameworks (NIST CSF, ISO 27001, CIS)
• Ability to balance security with business needs and make pragmatic decisions
• Excellent communication and stakeholder management skills, from engineers to executives
• Fluent English; Spanish is a plus

Nice to have

• Background in financial services, wealth management or another regulated industry
• Certifications such as CISSP, CCSP, SABSA, TOGAF or cloud architect and security certifications
• Experience with container and Kubernetes security, and infrastructure-as-code (Terraform)
• Experience supporting SaaS platforms used by enterprise or banking clients

What’s on offer

• Competitive salary and benefits package
• Hybrid working: 3 days a week in the Madrid office
• A high-impact role shaping the security strategy of an established, growing fintech
• Training, certification support and clear career progression