Ciso

Freightos
Barcelona, Spain
4 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

Amazon Web Services Cloud Computing Security Control Objectives for Information and Related Technology (COBIT) Cyber Security Disaster Recovery Identity and Access Management Software Vulnerability Management Google Cloud Information Technology CIS Benchmarks

Job description

Experteer Overview As Freighotos Chief Information Security Officer, you will guard trust across the platform, products, and data while enabling innovation and growth.You’ll shape a comprehensive cybersecurity program spanning risk management, governance, and security operations.You’ll balance strong protection with business acceleration, driving security as a strategic enabler for a global trade platform.This hybrid leadership role offers influence from the board to on?site cross?functional partners in Barcelona.Compensaciones / Beneficios * Develop and refine enterprise cybersecurity strategy, policies, and governance * Lead the security program to protect information confidentiality, integrity, and availability * Assess and manage cybersecurity risk with appropriate controls * Oversee security operations: threat monitoring, vulnerability management, incident response, remediation * Direct incident response, disaster recovery, and business continuity planning * Maintain security architecture across cloud, network, endpoint, application, and data * Ensure compliance with laws, regulations, and audits; support audits * Develop security policies, awareness programs, and culture * Advise executives and the Board on strategy, threats, and investments * Lead and mentor the information security team; manage budgets and investments * Oversee IAM, data protection, encryption, and privileged access controls * Collaborate with SRE, IT, Ru**D, legal, and business leaders to embed security * Manage third-party risk assessments with vendors * Monitor threat landscape and elevate security maturity Responsabilidades * Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or related field * 10+ years of progressive information security experience * 5+ years of leadership experience in security teams/programs * Strong understanding of NIST CSF, ISO/IEC ***, CIS Controls, COBIT * Experience presenting security strategy to executives and Boards * Cloud security experience (AWS and Google Cloud) * Experience managing security operations, incident response, vulnerability management, IAM, governance * Strong risk management and regulatory compliance knowledge * Excellent leadership, communication, and stakeholder management skills Requisitos principales *

Requirements

Manage third-party risk assessments with vendors * Monitor threat landscape and elevate security maturity Responsabilidades * Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or related field * 10+ years of progressive information security experience * 5+ years of leadership experience in security teams/programs * Strong understanding of NIST CSF, ISO/IEC *****, CIS Controls, COBIT * Experience presenting security strategy to executives and Boards * Cloud security experience (AWS and Google Cloud) * Experience managing security operations, incident response, vulnerability management, IAM, governance * Strong risk management and regulatory compliance knowledge * Excellent leadership, communication, and stakeholder management skills Requisitos principales *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:15 min

Auditing container configurations against CIS benchmark security standards

Madhu Akula · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

6:10 min

Unlocking free learning credits via Google Cloud Innovators

Asrar Asrar · World Congress 2024

5:03 min

Navigating new cybersecurity compliance frameworks and laws

Kurt Eder · LIVE

3:39 min

Validating data queries and infrastructure security configurations

Philipp Krenn · World Congress 2023

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all