Consultant - Security Architecture

Adidas' Security Architecture team sits within the broader Global Information Security organisation and acts as a trusted partner to engineering, platform, product, cloud, data, AI and enterprise architecture teams. Its purpose is to ensure security is embedded into every stage of technology and business transformation, designing secure, scalable and resilient solutions that protect adidas while enabling innovation at speed. The team operates within adidas' global technology ecosystem, collaborating across Technology Hubs in key innovation centres around the world.

• Act as the primary Information Security partner for assigned business domains, products, platforms and transformation initiatives, establishing trusted relationships with business and technology stakeholders to understand upcoming demand, strategic roadmaps and innovation initiatives.
• Drive early engagement of Information Security within project and product lifecycles to ensure security is embedded by design.
• Assess incoming security demand and prioritise activities based on business criticality, risk exposure, regulatory requirements and strategic objectives.
• Provide risk-based security guidance to business leaders, product teams, architects and engineering organisations, translating complex security requirements into practical, business-aligned solutions and facilitating informed risk decisions that balance security, usability
• Cost and business objectives.
• Act as a trusted advisor on cybersecurity, privacy, cloud security, AI security, identity management and secure software development practices, supporting technology teams in navigating security standards, policies, blueprints and regulatory requirements.
• Lead and oversee Secure Design Reviews (SDRs) for strategic technology initiatives, ensuring security and privacy requirements are identified and addressed throughout solution design and implementation.
• Drive adoption of Secure-by-Design principles across adidas technology teams and review architecture decisions for alignment with enterprise security standards and strategic security objectives.
• Provide guidance on security exceptions, compensating controls and risk treatment strategies.
• Conduct and oversee security risk assessments for new technologies, products, vendors and platforms, identifying security gaps, architectural weaknesses and emerging risks and facilitating risk discussions with project teams and business stakeholders.
• Ensure identified risks are documented, tracked and remediated according to adidas risk management processes, escalating significant risks and recommendations to senior technology and security leadership.
• Contribute to the evolution of security architecture frameworks, standards and methodologies, supporting enterprise-wide initiatives such as cloud transformation, AI adoption, Zero Trust, data protection and cybersecurity modernisation.
• Identify opportunities to improve security engagement models, processes, tooling and service delivery, and drive security maturity improvements across the technology landscape.
• Comply with security demand management KPIs and service metrics, delivering management reporting and executive insights on demand trends and security posture.

• College or university degree with a focus on Information Security/Cyber Security, or an equivalent combination of education and experience.
• 5–7 years of experience in Information/Cyber Security, including at least 3–4 years in security architecture and design or security consulting.
• Strong interpersonal and communication skills, with fluent English (verbal and written).
• Proven ability to engage with senior business and technology stakeholders.
• Experience translating security requirements into business-friendly guidance.
• Ability to challenge assumptions constructively and influence decision-making.
• Strong consulting mindset with a focus on balancing business objectives and risk management.
• Ability to act as a trusted advisor rather than a control gatekeeper.
• Strong understanding of cybersecurity principles, frameworks and controls, with experience or knowledge across security architecture, cloud security (Azure, AWS, GCP), identity and access management, application security, network and infrastructure security, and AI/GenAI security.
• Knowledge of Secure-by-Design principles including threat modelling, security design reviews, enterprise architecture concepts, cloud-native architectures, API security and microservices security.
• Strong understanding of risk management, security governance, compliance frameworks, policy development and security standards.
• Familiarity with technologies including cloud security (AWS, Azure or GCP), identity and access management (IAM, SSO, federation, Zero Trust), application and API security, network security architecture, data and AI security architecture, threat modelling methodologies such as STRIDE
• Secure SDLC practices, and modern architectures such as microservices, containers and serverless.

• Hybrid work setup based in Zaragoza, combining remote flexibility with three days per week working from the Zaragoza Tech Hub.

• Competitive salary (no range disclosed).

• Benefits package alongside the competitive salary.
• Valuable discounts on adidas products.
• Part of a company where digital transformation, innovation and continuous improvement are core principles of the culture.
• Join a team of talented and passionate security engineers, with significant opportunities to grow and reach expectations.
• Part of a highly engaged, multinational organisation with international career opportunities.
• Individual development, training and a tech community.

Adidas has been defining sport culture for more than 75 years, with an unmatched history and tradition of creating iconic products, consumer connections and experiences. Its mission is to be the best sports brand in the world, powered by innovation, technology and consumer-centric digital experiences.