> Markdown version of [/jobs/ext/1609910-head-of-information-security](https://www.wearedevelopers.com/jobs/ext/1609910-head-of-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Information Security - **Company:** Infront Asa (nor) - **Location:** Madrid, Spain (Remote available) - **Salary:** €50,000.0 - €100,000.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Microsoft Azure, Cloud Computing Security, Cyber Security, Identity and Access Management, Microsoft Security Essentials, Software Engineering, Software Vulnerability Management, Information Security Management System, Software Security - **Published:** July 20, 2026 - **Apply:** https://www.adzuna.es/contact-us.html ## About the Role + At least six years' experience in Information Security or Cyber Security. + Experience leading or significantly maturing an Information Security function or security programme. + Experience supporting DORA, NIS2 or comparable regulatory or operational resilience requirements. + Strong understanding of cloud security, identity and access management, vulnerability management, endpoint security and application security. + Experience working closely with software engineering and technology teams. + Strong understanding of Information Security risk management and security governance. + Experience managing security incidents, audits and penetration testing programmes. + Excellent communication and stakeholder management skills, including the ability to influence at Executive level. + Fluent written and spoken English. Nice to have experience with + Experience within financial technology, software or financial services. + Experience with Microsoft Azure and Microsoft security technologies. + Experience implementing or maintaining an ISO 27001 Information Security Management System. + Knowledge of the NIST Cybersecurity Framework and the Cyber Resilience Act. + Experience supporting customer security due diligence and client audits. + CISSP, CISM, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor or equivalent professional certification., English (3- Business fluent) ## Description We are looking for an ambitious, hands-on Head of Information Security to lead the next stage of Infront's cyber security journey. This is an opportunity to build and mature an enterprise information security capability within a growing international financial technology business. Working closely with Executive Management, Technology and Product leadership, you will define security strategy, establish governance, strengthen technical security capabilities and embed security across the organisation. This is not a role for someone looking to inherit a large security team. You will lead a small central security function and work directly with engineering teams, business stakeholders and external partners to deliver practical improvements. The role is ideally suited to an experienced Head of Information Security, Senior Cyber Security Manager or similar leader looking to take the next step towards a CISO-level role. This role is the organisation's senior Information Security leadership position and may be designated as the CISO for regulatory, customer and external assurance purposes. Responsibilities + Lead the development and delivery of Infront's Information Security strategy, operating model and security roadmap. + Act as the senior Information Security adviser to Executive Management and key business stakeholders. + Build and mature security governance, policies, standards and security metrics across the organisation. + Partner with Engineering and Product teams to embed security by design and secure software development practices. + Improve security capabilities across cloud security, identity and access management, vulnerability management, endpoint security, monitoring and incident response. + Lead Information Security risk management in partnership with the Enterprise Risk function. + Establish effective security architecture and secure design governance for new technology and products. + Develop and maintain Infront's Information Security Management System, supporting the organisation's security governance, assurance and compliance objectives. + Support compliance with DORA, NIS2, the Cyber Resilience Act and other applicable regulatory requirements. + Lead security incident response and ensure lessons learned are translated into measurable improvements. + Manage penetration testing, security assessments, audits and remediation programmes. + Support customer security due diligence, audits and assurance activities. + Develop and deliver security awareness and education programmes across the business. + Lead and develop a small Information Security team while coordinating the work of specialist security partners and suppliers. + Provide regular reporting on security posture, key risks and improvement activities to senior management. Who you are, Health & wellness: Benefit from wellbeing initiatives tailored to local needs, including access to an employee assistance programme that provides confidential support to employees and their families. Holiday: Enjoy competitive holiday entitlement aligned with local markets, so you can rest and recharge. Remote work: Enjoy the opportunity to work two days a week from home, with flexible working hours where possible. You may also request to work up to four weeks per year from a different location. Learning & development: Support your career progression with access to learning resources, ongoing conversations with your manager, and opportunities to share the knowledge you gain with your team. Culture & impact: Be part of an international team with a startup mindset and play a key role in making a meaningful impact. Our offices: Work from Europe's leading financial centres and be at the heart of where finance happens. Additional notes All candidates selected for employment are subject to Pre-Employment Screening. This process includes professional reference and background checks conducted by our third-party partner, ZINC. These screenings are part of our commitment to ensuring a secure, compliant, and trustworthy workplace. This position will be based in our new office in Madrid; however, we also welcome applications from candidates located in London or Oslo who have the legal right to work in their respective location. We kindly ask that you submit your CV in English. Job location Spain, Madrid Company Infront ASA (NOR) ## Related Videos - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)