Cyber & Digital Security - Identity and Access Management (IAM) Senior Specialist

We are looking for a Cyber & Digital Security - Identity and Access Management (IAM) Senior Specialist to be part of our IT Security and Compliance team :

Position Snapshot:

• Location: Barcelona, Spain
• Type of Contract: Permanent
• Stream: IT Security & Compliance
• Type of work: Hybrid
• Work Language: Fluent Business English

The role:

In order to strengthen our IT Security and Compliance Team, Identity and Access Management (IAM) team is currently looking for a Cyber & Digital Security - IAM Senior Specialist .

In this position, under the supervision and guidance of the IAM Product Manager, the Cyber & Digital Security - IAM Senior Specialist will bring manage the design and implementation of security products, platforms and solutions designed to mitigate IT risks across Nestlé Group and ensure that information assets are adequately protected in a Hybrid and Cloud environment. The Cyber & Digital Security - IAM Senior Specialist will be responsible of designing and implement IAM features, solutions or new services plus managing accesses (and privileged access) within the Cloud environments. Working at the leading edge of IS/IT for the product, application or platform, performing analysis to define the best approach for business demands and solution implementations in Cloud, helping to set the technological direction with the application owners, product or platform managers always minding a balance between security and user experience. The Cyber & Digital Security - IAM Senior Specialist will also support delivery and sustain of the most complex applications and business capabilities and may be accountable for specific deliverables in relation to development or support or may lead the technical activity within their area of specialty. The Cyber & Digital Security - IAM Senior Specialist will be responsible of remediation plans and to organize operational activities that will be managed by the offshore/support team.

What you'll do:

• Develop, maintain and publish up-to-date security policies, standards and guidelines, and oversee training and dissemination of security policies and practices around Authentication, Multifactor Authentication, Single Sign on, Conditional Access, as other security practices and serve as subject matter expert.
• Support and influence the technical activity (design, build, testing) in significant or complex projects and innovation initiatives (e.g.: perform preliminary studies, technical specifications).
• Make recommendations on how to improve the effectiveness, efficiency and delivery of services through use of (emerging) technology and technical methods and methodologies.
• Provides the product team with technical expertise, advising on best technology solutions, translating the business vision into technical vision (always minding a balance between security and user experience).
• Responsible for ensuring that all solutions within their technology area are delivered and maintained secure and compliant with internal standards and external regulations.
• Assist other workstreams in resolving complex technical problems and investigating the root cause of problems and recommend smart (specific, measurable, achievable, realistic, timely) solutions.

We offer you:

We offer more than just a job. We put people first and inspire you to become the best version of yourself:

• Great benefits including competitive salary and a comprehensive social benefits package. We have one of the most competitive pension plans on the market, as well as flexible remuneration with tax advantages: health insurance, restaurant card, mobility plan, etc.
• Personal and professional growth through ongoing training and constant career opportunities reflecting our conviction that people are our most important asset.
• Hybrid working environment with flexible working scheme. Our state-of-the-art campus is dog friendly and equipped with a medical center, canteen and areas to co-create network and chill
• Recreation activities such as yoga, Zumba, etc. and a wide range of volunteering activities.

Minimum qualifications:

• Bachelor's or master's degree in information systems, business administration or related field, or equivalent work experience.
• 5+ years of experience in Identity and Access Management in hybrid or Cloud environments.
• Demonstrated experience in hybrid and complex enterprise environments and technology areas like Cloud.
• Demonstrated Experience in Authentication and Authorization, OAuth, OpenID, SAML (and other protocols), Multifactor Authentication, Single Sign on, Conditional Access and in Microsoft Entra ID.
• Experience in effective communication at different level in the organization (technical and not technical audiences) in English.
• Poise and ability to act calmly and competently in high-pressure, high-stress situations.
• Must be a critical thinker with strong problem-solving skills.

Bonus Points if you:

• Knowledge of AWS and GCP IAM concepts.
• Experience using Azure DevOps.
• Professional security management certification, such as a Microsoft Identity and Access Administrator (SC300), Azure Security Engineer Associated (AZ500), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or any other Security related certifications.
• Knowledge of common information security management frameworks, such as ISO 27001, IS/ITIL, COBIS/IT and NIST would be a plus.
• Preference to have worked in a global environment and with virtual teams.

About the IT Hub

We are a team of IT professionals from many countries and diverse backgrounds, each with unique missions and challenges in the biggest health, nutrition and wellness company of the world. We innovate every day through forward-looking technologies to create opportunities for Nestlé's digital challenges with our consumers, customers and at the workplace. We collaborate with our business partners around the world to deliver standardized, integrated technology products and services to create tangible business value.

About Nestlé

We are Nestlé, the largest food and beverage company in the world, with a presence in more than 185 countries. With net sales of CHF 94.4 billion in 2022, the company has over 291,000 employees and 418 factories in 85 countries. Our values are based on respect: respect for ourselves, respect for others, respect for diversity, and respect for our future. Nestlé is dedicated to offering high-quality food and beverage products and services that contribute to the nutrition, health, and well-being of people, pets, and the planet. Additionally, it is committed to being a leading company in sustainability and achieving net zero greenhouse gas emissions by 2050. Want to learn more? Visit us at:

We encourage the diversity of applicants across gender, age, ethnicity, nationality, sexual orientation, social background, religion or belief and disability.

Step outside your comfort zone; share your ideas, way of thinking and working to make a difference to the world, every single day. You own a piece of the action – make it count.

Join Nestlé's IT Hub #beaforceforgood

How we will proceed:

You send us your CV → We contact relevant applicants → Interviews → Feedback → Job Offer communication to the Finalist → First working day