> Markdown version of [/jobs/ext/2511167-consultant-security-architecture](https://www.wearedevelopers.com/jobs/ext/2511167-consultant-security-architecture). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CONSULTANT - SECURITY ARCHITECTURE - **Company:** Adidas AG - **Location:** Spain - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cloud Engineering, Cyber Security, Identity and Access Management, Network Security, Zero Trust Network Access, Security Support Provider Interface, Software Engineering, Google Cloud, Software Security, Microservices - **Published:** August 19, 2026 - **Apply:** https://www.businessoffashion.com/careers/external-redirect-registration?JobId=319076&LinkSource=JobDetails ## About the Role * College or university degree with focus on Information Security/ Cyber Security, or equivalent combination of education and experience. * 5 - 7 years of experience in Information/ Cyber Security, including at least 3 - 4 year in the security architecture and design/ security consulting. * Strong interpersonal and communication skills. Fluent English skills (verbal and written). * Proven ability to engage with senior business and technology stakeholders. * Experience translating security requirements into business-friendly guidance. * Ability to challenge assumptions constructively and influence decision-making. * Strong consulting mindset with a focus on balancing business objectives and risk management. * Ability to act as a trusted advisor rather than a control gatekeeper Specific technical skills (role-dependent): * Strong understanding of cybersecurity principles, frameworks, and controls with experience/ knowledge across. + Security Architecture + Cloud Security (Azure, AWS, GCP) + Identity & Access Management + Application Security + Network & Infrastructure Security + AI/GenAI Security * Knowledge of Secure-by-Design principles including but not limited to: * Threat Modeling * Security Design Reviews * Enterprise Architecture concepts * Cloud-native architectures * API security * Microservices security, + Risk Management + Security Governance + Compliance Frameworks + Policy Development + Security Standards ## Description Security Demand Management * Act as the primary Information Security partner for assigned business domains, products, platforms, and transformation initiatives. * Establish trusted relationships with business and technology stakeholders to understand upcoming demand, strategic roadmaps, and innovation initiatives. * Drive early engagement of Information Security within project and product lifecycles to ensure security is embedded by design. * Assess incoming security demand and prioritize activities based on business criticality, risk exposure, regulatory requirements, and strategic objectives. * Ensure timely security support for cloud, AI, data, digital, retail, supply chain and corporate technology initiatives. Security Consultancy & Advisory * Provide risk-based security guidance to business leaders, product teams, architects, and engineering organizations. * Translate complex security requirements into practical, business-aligned security requirements and solutions. * Act as a trusted advisor on cybersecurity, privacy, cloud security, AI security, identity management, and secure software development practices. * Facilitate informed risk decision-making while balancing security, usability, cost, and business objectives. * Support technology teams in navigating security standards, policies, blueprints, and regulatory requirements. Secure-by-Design Governance * Lead and oversee Secure Design Reviews (SDRs) for strategic technology initiatives. * Ensure security and privacy requirements are identified and addressed throughout solution design and implementation phases. * Drive adoption of Secure-by-Design principles across adidas technology teams. * Review architecture decisions for alignment with enterprise security standards and strategic security objectives. * Provide guidance on security exceptions, compensating controls, and risk treatment strategies. * Conduct and oversee security risk assessments for new technologies, products, vendors, and platforms. * Identify security gaps, architectural weaknesses, and emerging risks. * Facilitate risk discussions with project teams and business stakeholders. * Ensure identified risks are documented, tracked, and remediated according to adidas risk management processes. * Escalate significant risks and recommendations to senior technology and security leadership. Security Strategy & Transformation * Contribute to the evolution of adidas security architecture frameworks, standards, and methodologies. * Support enterprise-wide initiatives related to cloud transformation, AI adoption, Zero Trust, data protection, and cybersecurity modernization. * Identify opportunities to improve security engagement models, processes, tooling, and service delivery. * Drive security maturity improvements across the technology landscape. Operational Excellence & Metrics * Comply with security demand management KPIs and service metrics. * Deliver management reporting and executive insights on demand trends and security posture. * Ensure security services are delivered consistently, efficiently, and in line with agreed service expectations., + Cloud security (AWS, Azure, or GCP) * Identity & access management (IAM, SSO, federation, Zero Trust) * Application & API security * Network security architecture * Data & AI Security Architecture * Threat modelling methodologies (STRIDE, etc.) * Secure SDLC practices * Modern architectures (microservices, containers, serverless) ## Related Videos - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Microservices: how to get started with Spring Boot and Kubernetes](https://www.wearedevelopers.com/videos/242-microservices-how-to-get-started-with-spring-boot-and-kubernetes) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)