Head of Cybersecurity, Ferrovial Construction
Company: Ferrovial Agroman SA
Posted on: April 8, 2021
Ferrovial is one of the world's leading infrastructure
operators, committed to developing sustainable solutions. The
company has presence in over 15 countries. It is a member of
Spain's blue-chip IBEX 35 index and is also included in prestigious
sustainability indices such as the Dow Jones Sustainability Index
and FTSE4Good. The aim of Corporation is the definition of the
Company's strategy, establishing the global policies, guidelines
and action lines related to the different functional areas of the
Organization (Internal Audit, Finance, Human Resources, Legal
Consultancy, IT, etc.), which are subsequently developed and
adapted to the specificities of every Business Unit. Furthermore,
Corporation provides corporate services to the different companies
of the Group, merging their information, at the same time. The Head
of Cybersecurity, Ferrovial Construction, is responsible for the
oversight and deployment of all adequate measures and controls to
provide the Company and its subsidiaries with a reasonable
cybersecurity control level. This role will initiate, plan, deploy,
maintain, control, improve all aspects of Ferrovial Construction
cybersecurity. --- Lead, manage and grow Ferrovial Construction
cybersecurity function according to Business needs.
--- Develop a cybersecurity practice in Ferrovial Construction that
can be relevant to its business units, subsidiaries and joint
ventures by defining and implementing a Cybersecurity strategy.
--- Negotiate with and for Ferrovial Construction business units,
subsidiaries and joint ventures the contracts, conditions and terms
regarding the cybersecurity baseline that must be provided.
--- Guarantee the deployment of the adequate measures and controls
onto products and services built through digital and technology
--- Ensure the maintenance and continuous improvement of such
measures and controls along the products and services
--- Manage and control security projects including start up and
launch of benchmarks and proof of concepts.
--- Manage cybersecurity vendors whose services are being provided
to Ferrovial Construction business units, subsidiaries and joint
--- Regular communications with Ferrovial Construction senior
management to report the cybersecurity posture of their companies,
the projects milestones consecution and the compliance situation in
terms of cybersecurity.
--- Provide support to Ferrovial risk and internal audit
--- Identify business opportunities to provide enhanced
cybersecurity services to Ferrovial Construction business units,
subsidiaries and joint ventures. Education & Experience:
--- Master's Degree in Computer Science, Engineering, Information
Technology or equivalent.
--- 7-10+ years of experience in managing complex cybersecurity
environments through its full lifecycle.
--- Definition, deployment and improvement of security strategies,
plans, and governance models in large enterprises and corporations,
and in international environments.
--- Definition, deployment, and improvement of risk management
--- Deployment, maintenance and assessment of ISO 27001, NIST CSF
and ENS certified environments.
--- Identification and treatment of risk derived from laws and
--- Definition, deployment, monitoring, evaluation/testing and
improvement of security architectures, infrastructures and services
in corporations and international scenarios.
--- Architecture models like SASE and Zero-Trust models.
Additionally, having demonstrable experience with NIST guides will
be an added value.
--- Modern Enterprise Architectures, with special interest in
knowledges related to industrial systems, ICS, IoT, OT/IT, and its
integration in Internet Open Architecture models.
--- Services provided by big *aaS providers, as Amazon AWS, Azure,
Bluemix, Google Cloud, Cloudera, Atlas/Mongo, etc.
--- Security incident management.
--- Business continuity management.
--- Cyber Intelligence.
--- Audits and security reviews.
--- Awareness, communication and training in Cybersecurity.
--- CISA, CISM, CISSP, CPP, ISO 27001, SANS--- security
certifications will be considered and preferred.
--- High English level in writing, speech and comprehension, being
fluent in conversations is required. The candidate must be able to
arrange and conduct meetings and to handle presentations fluently
--- Skills in negotiating contracts with regional implications.
--- Ability to manage remote teams nationally and
--- Capability to work against tight schedules.
--- Must be able to proactively multitask, problem solve and
implement innovative processes within a fast-paced.
Keywords: Ferrovial Agroman SA, Austin , Head of Cybersecurity, Ferrovial Construction, Professions , Austin, Texas
Didn't find what you're looking for? Search again!