What does a Project Security Manager do?
The role is responsible for contributing to the growth of the cyber security business in Spain providing specialty engineering services in the area of cyber security in close co-operation with the bids and projects engineering teams Plans and manages the security related activities within bids, projects and services to ensure that the Solution is adequately secure and this role includes responsibility for: Provides valid estimates for security engineering activities.
Analysing customer needs/requirements and assess solution architectures and technical choices.
Ensures solution compliance with customer needs, product policy, make-team-buy strategy and applicable rules and regulations.
Creates and manages the project Security Management Plan; carrying out a Security Risk Assessment, reviewing the technical risks and the related mitigation plans.
Creates, maintains contributes to the project Security Log.
Including appropriate traceability to the Causes, Consequences, Risk Control Measures, Assumptions, etc.
Maintains the Solution Security Requirements in form of Security Control Baseline.
Defines a valid and acceptable Security Case.
Liaises with external stakeholders for solution security; including PENTEST exercises.
Supports audits and the investigation of incidents and accidents.
Issues Security Statements and appropriate certification prior to interim, partial or final release of Solutions.
Archives the Security Case material at appropriate project milestones.
Ensures effective in-service reporting mechanisms exist and that security issues are identified and resolved.
Tasks Security Engineers to undertake project security activities.
Ensures the relevance of various cybersecurity expertise for all activities.
What are we looking for?
Telecom or computer science engineer or similar.
Master degree in cyber security highly valuated.
English fluency is a must.
Good knowledge and expertise in following areas: Security Architecture (Network, Database, Application, etc.)
Risk assessment Regulations and standards; ENS, CENELEC TS 50701, IEC 62443 and IEC 63452 Encryption / Cryptographic functions Vulnerability assessment and penetration testing What we offer?
Vacation periods of approximately 35 working days Thales Concilia which includes services for your care and the care of those around you Work from home up to 3 days a week Flexible working hours Lunch card Flexible compensation plan Health and wellness area with medical service, breastfeeding room, and access to different activities and initiatives that take care of your health Annual training plan adapted to your job in skills, languages, technical competencies An organization that considers diversity and inclusion as two strategic pillars: we work for gender equality, we want all generations to live together and learn from each other; we are enriched by all cultures and nationalities, we believe that all abilities are useful and necessary, and we create a safe environment for all people, regardless of their sexual orientation.