Giesecke+Devrient is a global company that offers security technologies, both in the physical and digital world. We develop, manufacture, and distribute products and solutions for the safeguarding of payment processes, identities, connectivity, and data. At G+D Mobile Security , a world leader in secure telecommunications systems, we are looking for a highly skilled and proactive Security Manager Azure to join our agile team.

Own and continuously improve our ISMS, policies, and security governance lifecycle. Lead security risk assessments,maintainthe risk register, and drive quarterly risk cycles. Ensure operational compliance with ISO 27001:2022, GSMA SAS, NIS-2 and customer security requirements and support hands‑on withconfiguration tasks.

Collaborate with the Security Architect to connect governance withDevSecOpsand cloud practices. Own Azure security posture,govern Microsoft Defender for Cloudfindings, Entra ID Conditional Access policies, Privileged Identity Management (JIT access), and quarterly access reviews.

Enforce Zero

Trust controls across cloud environments: continuous verification, least-privilege access, and RBAC/ABAC enforcement.

GovernIaCand CI/CD pipeline security gates: reviewIaCtemplates forsecretsmanagement compliance, approve pipeline security controls, andvalidaterollback procedures. Produce structured assurance reporting for management:metrics tied to the risk register, control effectiveness, and remediation tracking for findings from Defender for Cloud and AWS Security Hub. At least 5 years in information security, risk, audit, or compliance,



with a minimum of 3 years in a similar role (security management, cloud security governance, or ISMS ownership), ideally in regulated environments (telecommunications, banking, payments, SaaS).

Strong understanding of ISO 27001, risk methodologies, and modern security frameworks. Solid knowledge of security controls (IAM, third‑party risk, secure SDLC, cloud). Solid knowledge of Azure and AWS security controls.

Experience producing security assurance metrics and governance reports for senior stakeholders.

Fluent

English; German or Spanish is a plus. AZ-500 (Microsoft Certified: Azure Security Engineer Associate). AWS Certified Security–Specialty. CCSK (Certificate of Cloud Security Knowledge). Familiarity with the Microsoft Cloud Security Benchmark (MCSB) or CIS Benchmarks for Azure/AWS.

Global Collaboration: Work collaboratively with stakeholders around the globe. Benefit from continuous training, coaching, and talent development programs. Versátil working hours with the option for remote work (M-Th 8.30 – 17.30 and Fri 8.30 – 15.30; 3 days of remote work).

The personal data you provide will be processed to manage your application in accordance with the GDPR and our Privacy Policy, available at Data Privacy | G+D . We warmly welcome all applications regardless of gender, age, race or ethnic origin, social and cultural background, religion, disability and sexual orientation. G+D shapes trust in the digital age, with built-in security technology in three segments Digital Security, Financial Platforms and Currency Technology. #

📌 Security Manager Azure (Málaga)
🏢 Giesecke+Devrient
📍 Málaga