Security Architect Spain

AXA Group Operations; Madrid; On-site; EUR 70,000 - 90,000; Full time

Job summary

A leading multinational insurance company in Madrid is seeking a Security Technical Design Lead to oversee the security architecture for complex projects. The successful candidate will define and maintain security patterns, evaluate security designs, and develop new controls in compliance with best practices. A university degree and significant experience in security architecture are required, particularly in cloud and infrastructure technologies.

Qualifications

• Significant professional experience in the design and evaluation of security architectures.
• Strong experience in security architecture, including threat modeling and infrastructure technologies.
• Extensive expertise in security architecture, with in-depth knowledge of principles and best practices.

Responsibilities

• Own the GO technical security pattern library, and knowledge base.
• Evaluate the security design of the architecture and threat models.
• Define new security controls for complex products in coordination with GO Security Engineering Center team.

Skills

Security architecture

Threat modeling

Cloud technologies

Infrastructure technologies

Network security

API security

Identity and Access management services

Artificial Intelligence integration

Education

University degree in computer science, information security, systems architecture, or related field

Job description

The Security Technical Design Lead plays a critical role in bringing specialized expertise in Security architecture to GO Security teams. He or she ensures complex projects from AXA GO meet security standards, participating in the definition of compliance and security technical controls for products.

The division

You will join the Group Security division, defining the security standards to be applied by AXA entities, overseeing the overall security posture across the Group and providing centralized services to support entities.

Our main missions:

• Monitor the Security Threat Landscape
• Define and oversee Security Standards and Strategy implementation across the Group
• Drive local security objectives with C-Level executive of AXA entities
• Ensure the security of Group Operations as an entity
• Provide centralized security services and products to AXA entities

AXA Group Security is divided into 4 main blocks:

• Corporate functions: Security Advisory and Standards, Security Governance, Security Risk & Assurance, Security Strategy and Awareness
• CyberDefense
• Group Operations Security
• Corporate Chief Security Officers

The department / team

Group Operation Security mandate, as part of AXA Group Security division, is to Secure AXA GO as an entity and secure GO Products delivered by AXA GO as a Service Provider to other entities of AXA.

About the job

Job purpose

As the GO Security Technical Design Lead, your main objectives are to:

• Define and Maintain Technical security pattern library, and knowledge base, aligned with Group Architecture, GO Security Policies, and Standard GO Cyber Defense Products
• Perform architecture security reviews for large and risky projects/products supporting GO Security teams

Some example of main topics / technologies: Zero trust, network segregation, Public cloud, Containerization, Identity and Access management services, API security, security services, Artificial Intelligence integration.

Main missions

Your responsibilities include:

• Own the GO technical security pattern library, and knowledge base.
• Evaluate the security design of the architecture and threat models, including network, application, and data security measures for complex projects and products.
• Define new security controls for complex products in coordination with GO Security Engineering Center team and GO Cyber Defense teams; aligned with industry best practices and the organization's security policies.
• Provide recommendations for improving the security posture of the architecture, including potential remediation actions and risk mitigation strategies.

We are looking for someone with the following experience and skills:

• University degree in computer science, information security, systems architecture, or related field.
• Significant professional experience in the design and evaluation of security architectures.
• Strong experience in security architecture, including threat modeling, infrastructure technologies, cloud.
• Extensive expertise in security architecture, with in-depth knowledge of principles and best practices.
• Familiarity with cloud technologies and services, as well as associated security tools.
• Ability to define appropriate security controls for complex solutions and assess their effectiveness.