13 ago
|
Giesecke & Devrient Gb
|
Barcelona
13 ago
Giesecke & Devrient Gb
Barcelona
The role of Security Manager Azure will help shape G+D Mobile Security's future in IoT security. G+D combines digital security, financial platforms, and currency technology with a general reach of 14,000 employees.
Own and continuously improve our ISMS, policies, and security governance lifecycle.
Lead security risk assessments, maintain the risk register, and drive quarterly risk cycles.
Ensure operational compliance with ISO 27001:2022, GSMA SAS, NIS-2, and customer security requirements; support hands‑on configuration tasks.
Collaborate with the Security Architect to connect governance with DevSecOps and cloud practices.
Own Azure security posture, govern Microsoft Defender for Cloud findings, Entra ID Conditional Access policies, Privileged Identity Management (JIT access), and quarterly access reviews.
Support cross‑platform governance tasks, policy alignment, and shared risk register entries covering AWS and Azure workloads.
Enforce Zero Trust controls across cloud environments: continuous verification, least‑privilege access, and RBAC/ABAC enforcement.
Govern IaC and CI/CD pipeline security gates: review IaC templates for secrets management compliance, approve pipeline security controls, and validate rollback procedures.
Produce structured assurance reporting for management: metrics tied to the risk register, control effectiveness, and remediation tracking for findings from Defender for Cloud and AWS Security Hub.
At least 5 years in information security, risk, audit, or compliance, with a minimum of 3 years in a similar role (security management, cloud security governance, or ISMS ownership), ideally in regulated environments (telecommunications, banking, payments, SaaS).
Strong understanding of ISO 27001, risk methodologies, and modern security frameworks.
Solid knowledge of security controls (IAM, third‑party risk, secure SDLC, cloud).
Solid knowledge of Azure and AWS security controls.
Familiarity with IaC security practices: secrets management, pipeline a
📌 Security Manager Azure (Barcelona)
🏢 Giesecke & Devrient Gb
📍 Barcelona