Senior Cyber Security Specialist - Privileged Access Management

• Degree in (Business) Informatics or a comparable IT qualification, combined with several years of hands-on experience in support or development environments.
• Strong analytical thinking, service-oriented mindset, and proactive problem solving skills, ideally complemented by solid project management capabilities.
• Practical experience with BASF's ITSM and IAM-related tools (e.g., ServiceNow, AccessIT, AdminIT).
• Familiarity with modern collaboration and development environments such as Azure DevOps, Microsoft Teams, or AI-supported tools (e.g., Copilot, SIA), and affinity to adopt to new technologies.
• Fluent communication in English in an international environment with cross-functional teams.

• Experience with PAM tools is a plus (CyberArk, BeyondTrust or similar)
• Basic Python or scripting skills are a plus and support the ability to drive automation and innovation.

• A secure work environment because your health, safety and wellbeing is always our top priority.
• Flexible work schedule and Home-office options, so that you can balance your working life and private life.
• Learning and development opportunities
• 25 holiday days per year
• 5 additional days (readjustment)
• A collaborative, trustful and innovative work environment
• Being part of an international team and work in global projects

• Relocation assistance to Madrid provided

As part of Cyber Security Engineering - Identity & Access Management (IAM), you will take a key role in strengthening and evolving BASF's Privileged Access Management (PAM) capabilities.

You will work in a global, complex, and security-critical environment, ensuring secure and compliant privileged access across on-premise and cloud systems, while contributing to BASF's transition towards Zero Trust and modern identity architectures.

• Design, implement, and operate modern Privileged Access Management (PAM) solutions, ensuring secure and scalable access across BASF.
• Take ownership of critical security platforms, including:
  
  • PASS - Privileged Account Security Solution (CyberArk)
  • EPM - Endpoint Privilege Management (CyberArk)
  • MFA Solution RSA SecurID
  • SSH Jump Servers
• Ensure platform stability, security, and compliance by managing the full system lifecycle across Windows and Linux environments (patching, maintenance, vulnerability remediation).
• Deliver high-quality, reliable services by driving testing, documentation, and knowledge sharing (e.g., Confluence, internal knowledge bases).
• Actively contribute to the evolution of BASF's security services, aligning with strategic initiatives, industry trends, and emerging technologies.
• Lead or contribute to projects, such as cloud transformation and Zero Trust implementation.
• Drive innovation by integrating AI-supported capabilities (e.g., SIA, Copilot) into operational processes to enhance efficiency and automation
• Collaborate across a global ecosystem and act as a trusted advisor, translating business and security requirements into effective technical solutions (application owners, infrastructure teams, security functions, vendors, and partners).