Security Architect (Hybrid role in Barcelona)

Michael Page; Barcelona; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

Michael Page is seeking a Security Architect to shape cybersecurity architecture across a global enterprise, delivering high-visibility initiatives and driving strategic security programs in a multicultural environment.

You will develop target architectures, perform threat modelling, and provide risk-based guidance to engineering, infrastructure and app teams, ensuring secure-by-design principles and alignment with security standards while supporting continuous improvement.

Responsabilidades

• Support the development of security architectures, including target states, transition plans and roadmaps aligned to business objectives, IT strategy and security risk appetite.
• Provide risk-based security architecture guidance to engineering, infrastructure, application, architecture, project and business teams.
• Review solution, application, infrastructure and integration designs to ensure secure-by-design principles, appropriate technology selection and alignment with PageGroup security policies and standards.
• Support security architecture activities across BAU services, projects, programmes and material change initiatives, ensuring security requirements are identified, designed, implemented and governed.
• Perform threat modelling, threat analysis and architecture risk assessments to identify threats, attack paths, vulnerabilities, security weaknesses and appropriate mitigating controls.
• Define, document and maintain security requirements, control specifications, architectural patterns, standards, baselines and implementation guidance, ensuring alignment with business risk appetite and applicable security standards.
• Conduct security architecture reviews and implementation assurance activities to validate that agreed security controls and requirements have been effectively implemented.
• Review remediation plans and support the closure of security findings, defects and design issues.
• Participate in architecture governance forums, change reviews and security assurance activities, providing advice on security risks and compliance with security standards.
• Conduct independent security reviews and produce technical reports, recommendations and supporting documentation, including working with third parties where required.
• Maintain awareness of emerging technologies, threats and security trends, recommending updates to standards, controls and guidance where appropriate.
• Support continuous improvement activities that strengthen the security posture of existing technology platforms and services.

Descripción del empleo

• High visibility and business impact
• Opportunity to grow as a strategic Security Architect

A leading global professional services organisation with a strong international presence, operating in multiple countries and supporting a large-scale, enterprise technology environment. The company is investing in its cybersecurity capabilities and digital transformation, offering the opportunity to work on complex global projects, modern cloud technologies, and strategic security initiatives within a collaborative and multicultural environment.

Responsibilities

• Support the development of security architectures, including target states, transition plans and roadmaps aligned to business objectives, IT strategy and security risk appetite.
• Provide risk-based security architecture guidance to engineering, infrastructure, application, architecture, project and business teams.
• Review solution, application, infrastructure and integration designs to ensure secure-by-design principles, appropriate technology selection and alignment with PageGroup security policies and standards.
• Support security architecture activities across BAU services, projects, programmes and material change initiatives, ensuring security requirements are identified, designed, implemented and governed.
• Perform threat modelling, threat analysis and architecture risk assessments to identify threats, attack paths, vulnerabilities, security weaknesses and appropriate mitigating controls.
• Define, document and maintain security requirements, control specifications, architectural patterns, standards, baselines and implementation guidance, ensuring alignment with business risk appetite and applicable security standards.
• Conduct security architecture reviews and implementation assurance activities to validate that agreed security controls and requirements have been effectively implemented.
• Review remediation plans and support the closure of security findings, defects and design issues.
• Participate in architecture governance forums, change reviews and security assurance activities, providing advice on security risks and compliance with security standards.
• Conduct independent security reviews and produce technical reports, recommendations and supporting documentation, including working with third parties where required.
• Maintain awareness of emerging technologies, threats and security trends, recommending updates to standards, controls and guidance where appropriate.
• Support continuous improvement activities that strengthen the security posture of existing technology platforms and services.

• Opportunity to play a key role in shaping and improving cybersecurity architecture within a global enterprise environment.
• Exposure to large-scale projects, cloud technologies, and complex security challenges across multiple regions and business functions.
• Strong stakeholder visibility, working closely with architecture, engineering, infrastructure, and senior leadership teams.
• A collaborative and international environment with opportunities for professional growth and continuous learning.
• The chance to drive Secure-by-Design practices and influence strategic technology decisions with a direct business impact.