Senior Cybersecurity Architect & Strategy Lead

Ferrovial Construction; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Ferrovial Corporate US, LLC in Austin, TX seeks a Senior Cybersecurity Specialist to build a comprehensive cybersecurity program across CINTRA USA. You will identify risks, design controls, and drive security across IT/OT, cloud, and industrial systems.

Collaboration with internal teams ensures governance, audits, and regulatory compliance are effective. The role demands experience with ISO 27001, NIST CSF, and SASE/Zero Trust, plus cloud security and GRC processes.

Qualifications

• Bachelor’s degree in Computer Science or related field.
• 4+ years of experience in managing complex cybersecurity environments and incidents.
• Experience with ISO 27001 and NIST CSF implementations.
• Knowledge of legal/compliance requirements and GRC.
• Familiarity with SASE and Zero Trust architectures.
• Experience with major cloud providers (AWS, Azure, Google Cloud).

Responsibilities

• Develop a cybersecurity practice at CINTRA USA by defining and implementing a comprehensive cybersecurity strategy.
• Provide security for CINTRA IT/OT systems by identifying vulnerabilities across software, hardware, networks, data centers, and cloud environments, and designing regulation-compliant strategies and defensive controls.
• Manage and monitor security projects, including benchmarks and proof-of-concepts, and oversee audits (SOC 2 and PCI).

Skills

Cybersecurity strategy

ISO 27001

NIST CSF

GRC

SASE

Zero Trust

ICS/OT/IoT security

Cloud security (AWS/Azure/Google)

Education

Bachelor’s degree in Computer Science or related field

Tools

GRC tools

Job description

Ferrovial Corporate US, LLC in Austin, TX seeks a Senior Cybersecurity Specialist to build a comprehensive cybersecurity program across CINTRA USA. You will identify risks, design controls, and drive security across IT/OT, cloud, and industrial systems.

Collaboration with internal teams ensures governance, audits, and regulatory compliance are effective. The role demands experience with ISO 27001, NIST CSF, and SASE/Zero Trust, plus cloud security and GRC processes.