Senior Cybersecurity Architect

1 Opening
- Madrid

**Role description**:
**UST is looking for the very Top Talent and we would be delighted if you were to join our family**

More in detail, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and a presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.

We are looking for an experienced and visionary **Senior Cybersecurity Architect** to join our team and support one of our valued clients in the **banking sector**. In this critical role, you will design and evaluate secure architectures, ensuring compliance with **financial regulations**, internal policies, and global standards. You will help implement innovative security solutions while aligning with corporate strategies to safeguard the organization’s sensitive data and assets.

**Your main tasks and accountabilities will be**:

- Evaluate and review the security architectures of banking projects to ensure compliance with financial regulations, internal policies, and global security principles.
- Design and implement reference architectures for secure banking systems, promoting the adoption of trusted technologies and best practices.
- Ensure compliance with Corporate Security Policies, establishing security standards tailored to the needs of the banking sector.
- Act as a trusted advisor on banking-specific security challenges, including regulatory compliance frameworks like PCI-DSS, SWIFT Customer Security Program, and local financial laws.
- Collaborate closely with Global Cybersecurity Architecture teams to incorporate banking-sector trends and cutting-edge practices into security reference standards.
- Drive alignment with global cybersecurity initiatives and frameworks while considering the unique demands of the banking industry.
- Partner with the CTO Architecture team to integrate security into banking technologies and infrastructure.
- Engage with the CISO to define banking-specific security priorities and ensure the security posture meets both operational resilience and compliance requirements.
- Provide expert consultation on security issues across banking teams and projects, helping address compliance, privacy, and risk management needs.

**What do we expect from you?**
- Experience & Education:_
- Over 15 years of experience in IT, with at least 10 years in cybersecurity architecture or a similar senior role, preferably in financial services or banking.
- Bachelor’s or Master’s degree in Engineering, Computer Science, Telecommunications, or a related field.
- Certifications: AWS Security, ISACA, NIST, ISO, CompTIA Security+, CISSP.
- Knowledge of financial sector standards: PCI-DSS, SWIFT CSP, GDPR, and other regional banking regulations.
- Vendor-specific certifications (preferred): Palo Alto, Checkpoint, Cisco.
- Technical Expertise:_

Advanced expertise in operational and analytical cybersecurity, with a focus on banking environments, including:

- Digital Identity and Access Management: SAML, OpenID Connect.
- API Security Access: OAuth 2.0, JWT Bearer Grant, Auth Code with PKCE.
- PKI environments, cryptography, secrets management (e.g., CMEK/BYOK).
- Experience with secure cloud architectures, particularly on AWS.
- Networking and security for multi-layer banking environments (OSI Model, high availability).
- Threat modeling methodologies (e.g., STRIDE) to identify and mitigate potential threats.
- Familiarity with microservices architecture (Docker, Kubernetes) and SecDevOps practices.
- Knowledge of banking-related risk assessment, impact analysis, and secure solution design.
- Additional Skills:_
- Strong familiarity with banking compliance and regulatory requirements for cybersecurity.
- Proficient in documenting security architectures for complex systems in banking environments.
- TOGAF or similar framework knowledge (preferred).
- Advanced communication skills to collaborate across teams and effectively advocate for security priorities.
- Fluent in English and Spanish.
- Key Attributes:_
- Strategic thinker with a deep understanding of banking-specific cybersecurity challenges.
- Critical thinking, problem-solving, and ownership of complex solutions.
- Proven ability to work effectively under pressure while balancing multiple priorities.
- Optimism, resilience, and proactive approaches to uncertainty.

**What do we offer?**
- 23 days of Annual Leave plus the 24th and 31st of December as discretionary days
- Work location: Málaga (Spain)
- Working modality: Hybrid (3 days in office, 2 days remote).
- Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurance).
- 'Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan )
- Free access to several training platforms
- Professional stability and career plans
- UST also, compensates re