Consultant - Security Architecture

At adidas, every day is a chance to flip the script. An invitation to take everything we know and re-invent it. Do it better. Never settling for good enough. Every day we get up, invent, adapt, improvise, find new ways to collaborate, and do the unexpected. We’re creators, makers and doers. Helping athletes make a difference, not just in their games, but in their lives and in their world. It’s an obsession. We’ve been doing this for more than 75 years. With an unmatched history and tradition of creating iconic products, consumer connections and experiences, we’ve been defining sport culture since the beginning. And we’re never done. Come be a part of shaping the future together with us. IT STARTS WITH YOU CONSULTANT - SECURITY ARCHITECTURE INFORMATION SECURITY AND TRANSFORMATION PURPOSE: At adidas, our mission is to be the best sports brand in the world, powered by innovation, technology, and consumer-centric digital experiences. The Security Architecture team plays a pivotal role in enabling this vision by ensuring security is embedded into every stage of technology and business transformation. As part of the broader Global Information Security organization, the Security Architecture team serves as a trusted partner to engineering, platform, product, cloud, data, AI, and enterprise architecture teams. We work closely with stakeholders across the organization to design secure, scalable, and resilient solutions that protect adidas while enabling innovation at speed. The Security Architecture team operates within adidas' global technology ecosystem, collaborating across our Technology Hubs located in key innovation centers around the world. These Tech Hubs bring together diverse teams of engineers, architects, product managers, security professionals, and digital experts who collectively shape the future of technology at adidas. By working in a globally connected environment, you will have the opportunity to: • Influence security decisions across global platforms serving millions of consumers. • Partner with international teams spanning Digital, ERP, Supply Chain, Retail, eCommerce, Data & Analytics, and Corporate Functions. • Support cutting-edge initiatives involving Cloud, AI, GenAI, Data Platforms, Automation, and modern application architectures. • Collaborate with talented professionals from diverse cultural and technical backgrounds. • Contribute to technology solutions that power adidas operations and consumer experiences worldwide. KEY ACCOUNTABILITIES: Security Demand Management • Act as the primary Information Security partner for assigned business domains, products, platforms, and transformation initiatives. • Establish trusted relationships with business and technology stakeholders to understand upcoming demand, strategic roadmaps, and innovation initiatives. • Drive early engagement of Information Security within project and product lifecycles to ensure security is embedded by design. • Assess incoming security demand and prioritize activities based on business criticality, risk exposure, regulatory requirements, and strategic objectives. • Ensure timely security support for cloud, AI, data, digital, retail, supply chain and corporate technology initiatives. Security Consultancy & Advisory • Provide risk-based security guidance to business leaders, product teams, architects, and engineering organizations. • Translate complex security requirements into practical, business-aligned security requirements and solutions. • Act as a trusted advisor on cybersecurity, privacy, cloud security, AI security, identity management, and secure software development practices. • Facilitate informed risk decision-making while balancing security, usability, cost, and business objectives. • Support technology teams in navigating security standards, policies, blueprints, and regulatory requirements. Secure-by-Design Governance • Lead and oversee Secure Design Reviews (SDRs) for strategic technology initiatives. • Ensure security and privacy requirements are identified and addressed throughout solution design and implementation phases. • Drive adoption of Secure-by-Design principles across adidas technology teams. • Review architecture decisions for alignment with enterprise security standards and strategic security objectives. • Provide guidance on security exceptions, compensating controls, and risk treatment strategies. • Conduct and oversee security risk assessments for new technologies, products, vendors, and platforms. • Identify security gaps, architectural weaknesses, and emerging risks. • Facilitate risk discussions with project teams and business stakeholders. • Ensure identified risks are documented, tracked, and remediated according to adidas risk management processes. • Escalate significant risks and recommendations to senior technology and security leadership. Security Strategy & Transformation • Contribute to the evolution of adidas security architecture frameworks, standards, and methodologies. • Support enterprise-wide initiatives related to cloud transformation, AI adoption, Zero Trust, data protection, and cybersecurity modernization. • Identify opportunities to improve security engagement models, processes, tooling, and service delivery. • Drive security maturity improvements across the technology landscape. Operational Excellence & Metrics • Comply with security demand management KPIs and service metrics. • Deliver management reporting and executive insights on demand trends and security posture. • Ensure security services are delivered consistently, efficiently, and in line with agreed service expectations. WHAT WE ARE LOOKING FOR: • College or university degree with focus on Information Security/ Cyber Security, or equivalent combination of education and experience. • 5 – 7 years of experience in Information/ Cyber Security, including at least 3 - 4 year in the security architecture and design/ security consulting. • Strong interpersonal and communication skills. Fluent English skills (verbal and written). • Proven ability to engage with senior business and technology stakeholders. • Experience translating security requirements into business-friendly guidance. • Ability to challenge assumptions constructively and influence decision-making. • Strong consulting mindset with a focus on balancing business objectives and risk management. • Ability to act as a trusted advisor rather than a control gatekeeper Specific technical skills (role‑dependent): • Strong understanding of cybersecurity principles, frameworks, and controls with experience/ knowledge across. • Security Architecture • Cloud Security (Azure, AWS, GCP) • Identity & Access Management • Application Security • Network & Infrastructure Security • AI/GenAI Security • Knowledge of Secure-by-Design principles including but not limited to: • Threat Modeling • Security Design Reviews • Enterprise Architecture concepts • Cloud-native architectures • API security • Microservices security • Strong understanding of: • Risk Management • Security Governance • Compliance Frameworks • Policy Development • Security Standards WHAT IF I DON’T CHECK ALL THE BOXES? It’s ok if some of the technology or terminology mentioned here are new for you. We’ll happily teach you. At adidas, we’re keen to increase our team’s diversity of backgrounds and skills, and we’re more interested in the work you will produce than that work you’ve already produced in the past. If you’d love to work with us, then we’d love to hear from you. MAIN TECHNOLOGIES WE USE: • • Cloud security (AWS, Azure, or GCP) • Identity & access management (IAM, SSO, federation, Zero Trust) • Application & API security • Network security architecture • Data & AI Security Architecture • Threat modelling methodologies (STRIDE, etc.) • Secure SDLC practices • Modern architectures (microservices, containers, serverless) WHAT WE OFFER: • You will be part of a company where digital transformation, innovation and continuous improvement are core principles of our culture. • You will join a team of talented and passionate security engineers, with a lot of opportunities to grow and reach your expectations. • You will be part of a highly engaged, multinational with international career opportunities. • Individual development, training and a tech community. • Hybrid work setup based in Zaragoza, combining remote flexibility with three days per week working from our Zaragoza Tech Hub. • Competitive salary, benefits and valuable discounts on adidas products. Sound good? Apply here and be part of our tomorrow. Not the right job for you? There are thousands of opportunities at adidas around the world. Find the one with your name on it. Want to get a behind the scenes look at our offices? adidas Careers Check out these videos to see what it’s like to work in our offices around the world! THROUGH SPORT, WE HAVE THE POWER TO CHANGE LIVES www.careers.adidas-group.com