> Markdown version of [/jobs/ext/1304798-information-security-specialist](https://www.wearedevelopers.com/jobs/ext/1304798-information-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Specialist

- **Company:** Roche
- **Location:** Madrid, Spain (Remote available)
- **Salary:** €60,000.0 - €90,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cloud Computing Security, Cyber Security, PCI Data Security Standards, Information Security Management System
- **Published:** July 17, 2026
- **Apply:** https://www.adzuna.es/contact-us.html

## About the Role

Requirements:Proven professional experience in information security, governance, risk, and complianceStrong knowledge of compliance frameworks such as SOC 2, ISO 27001, NIS2, PCI-DSS, with hands-on audit experienceAbility to interpret regulatory standards and implement effective technical security controlsSolid experience in security risk assessment, control design, and risk mitigation strategiesExcellent communication, collaboration, and stakeholder management skillsExperience in incident management, cloud security, or AI governance is considered a plusRelevant security certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor or Implementer are advantageousComfortable working in remote, asynchronous, and globally distributed environments

## Description

Inscribirse en esta oferta This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Information Security Specialist in Spain.In this role, you will join a high-performing security team focused on protecting sensitive data, strengthening compliance frameworks, and continuously improving security operations in a fast-growing, globally distributed environment. You will play a key role in shaping and maintaining a strong security posture, balancing strategic governance with hands-on execution. Working closely with cross-functional teams, you will help bridge regulatory requirements and daily technical operations. This position offers broad exposure across compliance, risk management, and incident response initiatives. You will contribute directly to business trust, operational resilience, and regulatory excellence. The environment is collaborative, innovative, and fully remote, enabling flexibility, ownership, and impact at
scale.Accountabilities:

 + Lead and maintain the Information Security Management System, ensuring ongoing alignment with industry standards and internal policies
 + Drive and manage compliance programs including SOC 2 Type II, ISO 27001, and NIS2, preparing and supporting audits end-to-end
 + Translate regulatory and compliance requirements into actionable technical and operational security controls
 + Assess systems, processes, and infrastructure against security frameworks and best practices
 + Participate actively in risk management initiatives, incident response activities, and continuous security improvement
 + Provide expertise and support during customer and partner due diligence processes
 + Contribute to AI security governance and collaborate closely with engineering, product, and operational teams, Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.Inscribirse en esta oferta
Recibir ofertas similares por correo electrónico
Al crear una alerta, aceptas nuestros Términos y condiciones y Política de privacidad, y el uso de cookies.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [A Computer Is All You Need](https://www.wearedevelopers.com/videos/100142-a-computer-is-all-you-need)
- [Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing](https://www.wearedevelopers.com/videos/100108-building-sovereign-ai-lessons-from-deploying-secure-rag-systems-using-confidential-computing)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)