Cybersecurity Strategy Lead - ISO 27001, NIST, Zero Trust

Ferrovial; Texas; On-site; USD 120,000 - 160,000; Full time

Job summary

Ferrovial Corporate US, LLC in Austin, TX seeks a Senior Cybersecurity Specialist to build and execute a comprehensive cybersecurity program for CINTRA USA across IT/OT environments.

You will identify vulnerabilities, deploy robust controls, and oversee audits (SOC 2, PCI) while coordinating with vendors and internal teams to strengthen the security posture and meet regulatory requirements.

Qualifications

• Bachelor’s degree in CS, Engineering or related field with four years of cybersecurity work experience.
• Experience managing complex cybersecurity environments end-to-end.
• Experience with ISO 27001 and NIST CSF implementations and audits.
• Knowledge of legal/compliance (GRC) requirements and risk management.
• Ability to design and improve security architectures across corporate and international settings.

Responsibilities

• Develop and lead a comprehensive cybersecurity practice for CINTRA USA.
• Provide security for IT/OT systems and manage vulnerabilities across components.
• Define, deploy, monitor and improve security controls and architectures.
• Oversee vendor activities, audits (SOC 2, PCI) and regulatory compliance.
• Develop policies and governance, and coordinate across departments using GRC tools.
• Plan and test Business Continuity and Disaster Recovery capabilities.

Skills

Cybersecurity management

ISO 27001

NIST CSF

GRC

Security architecture

SASE & Zero Trust

ICS/OT/IoT security

Cloud security (AWS/Azure/etc.)

BCP/DRP planning

Education

Bachelor’s degree in CS/Engineering/IT

Tools

GRC tools

Job description

Ferrovial Corporate US, LLC in Austin, TX seeks a Senior Cybersecurity Specialist to build and execute a comprehensive cybersecurity program for CINTRA USA across IT/OT environments.

You will identify vulnerabilities, deploy robust controls, and oversee audits (SOC 2, PCI) while coordinating with vendors and internal teams to strengthen the security posture and meet regulatory requirements.