• Define the IAM roadmap and ensure alignment with security, compliance, and business needs. • Design and maintain enterprise IAM architectures for workforce, partners, and customers. • Lead initiatives related to authentication, authorization, identity governance, and privileged access. • Contribute to enterprise security architecture standards beyond IAM, with identity as a foundational control. • Set standards for identity lifecycle management, directory services, federation, and access controls. • Drive implementation of modern IAM capabilities such as SSO, MFA, password less authentication, SCIM, role-based access, and just-in-time access. • Oversee integration of cloud and on-prem applications using SAML, OIDC, and OAuth. • Evaluate tools, guide vendor selection, and manage technical relationships. • Develop reusable patterns, reference architectures, and security guidance for development teams. • Partner with engineering to embed IAM and security controls into CI/CD pipelines and cloud platforms. • Design and govern enterprise identity architecture across AWS, Okta, Entra ID, Active Directory, and hybrid environments. • Enforce least-privilege access using federation, roles, conditional access, and zero trust principles. • Architect secure access for cloud workloads, eliminating long-lived credentials and unmanaged identities. • Secure non-human identities, service accounts, APIs, and automation using scoped roles, ownership models, and rotation policies. • Design and operate centralized secrets and key management solutions using KMS, Vault, and PAM platforms. • Centralize identity logging, monitoring, and response for authentication and authorization events. • Support security operations by improving access-focused detection, alerting, and incident response workflows. • Establish access policies, role models, and attestation processes. • Ensure IAM and access controls meet regulatory, audit, and internal security expectations. • Provide oversight for provisioning, deprovisioning, and access escalation processes. • Guide monitoring and tuning of identity and security services to meet availability and performance targets. • Mentor IAM and security engineers and influence cross-functional teams. • Work closely with security, infrastructure, application owners, risk, and compliance partners. • Communicate technical and security concepts clearly to both technical and non-technical audiences. • Support incident response activities when identity or access systems are involved.

• Design, build, and continuously improve threat detections across 1Password’s infrastructure • Lead and support security incident response activities • Apply threat intelligence and knowledge of attacker TTPs • Collaborate with Security, Infrastructure, and IT teams • Use automation, scripting, and Detection-as-Code practices • Own end-to-end security projects aligned with Detection & Response initiatives • Participate in a shared on-call rotation and support high-severity incidents • Contribute to operational maturity through playbooks, mentoring, tabletop exercises, and audits

• Gestión documental, elaboración de presupuestos, seguimiento de clientes y soporte técnico en proyectos de seguridad electrónica. • Documentación y Reportes: elaboración de presupuestos en Excel y maquetación en Word y PDF. • Búsqueda de materiales en páginas de proveedores. • Realización de informes de mantenimientos preventivos y supervisión de documentación recibida. • Proyectos y Soporte Técnico: desarrollo de proyectos en AutoCAD. • Realización de presentaciones en PowerPoint. • Control de documentación técnica de instalaciones. • Atención y Seguimiento a Clientes: presentación de presupuestos y acompañamiento del proceso.

• Define, maintain, and continuously improve rules, procedures, and processes in the ISMS considering internal and external requirements • Take over Lifecycle Management of Cybersecurity Rule Landscape • Manage and evolve the regulatory landscape as an efficient and effective regulatory system for cybersecurity • Implement and execute rule adherence measurement processes • Execute Cybersecurity Assessments • Exercise policy authority on the topic of cybersecurity • Assess and process security exceptions • Work with various data sources and to identify cyber risks within the organization • Conduct cyber risk assessments and prioritize risks based on their potential impact on the organization • Further develop the IT Service framework for cyber risk management • Actively track cyber risks, including evaluation of mitigation effectiveness • Support the management of ContiTechs external security posture • This role serves as the primary point of contact for rule interpretation and management / risk controls.