Information Security Lead

• Defining and leading cybersecurity strategies aligned with business objectives and executive leadership priorities.
• Implementing and maturing Information Security Management Systems (ISMS) within regulated environments.
• Leading compliance programmes aligned with the Spanish National Security Framework (ENS - Royal Decree 311/2022).
• Driving organisational and governance adaptations to meet NIS2 Directive requirements.
• Managing corporate and technology risk management programmes.
• Overseeing Security Operations Centres (SOC) and incident response capabilities in 24x7 environments.
• Embedding security into technology projects through Security by Design and DevSecOps principles.
• Delivering executive-level reporting to senior management and governance bodies.
• Coordinating cybersecurity initiatives with public sector organizations and cybersecurity authorities such as ACC, CCN-CERT, CTTI, or equivalent bodies.

• Bachelor’s Degree in Computer Science, Telecommunications Engineering, Cybersecurity, or a related discipline.
• A minimum of 7 years’ proven experience within technology systems and cybersecurity environments.
• At least 5 years’ experience in an equivalent role as an Information Security Manager, Security Office Lead, or similar senior security leadership position.
• Fluent Catalan and Spanish (written and spoken).
• Hybrid working model with 60-80% on-site presence required.
• English proficiency at B2 level or above.

Professional Certifications

Candidates must hold a minimum of three current certifications from the following (or equivalent):

• CISM (Certified Information Security Manager)
• CISA (Certified Information Systems Auditor)
• CDPSE (Certified Data Privacy Solutions Engineer)
• CCSK v5 (Certificate of Cloud Security Knowledge)
• Strong communication and stakeholder management skills, with the ability to engage effectively with executive leadership and produce high-quality risk and security status reports.
• Previous experience as a CISO or Head of Security within the public sector, critical infrastructure organizations, or highly regulated industries.
• Experience in Third-Party Risk Management (TPRM) and supply chain security across multi-vendor environments.
• Knowledge of or experience in Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP).

Our client is one of the leading digital, information, and communications technology company, and one of the world’s top ICT service providers. With more than 50 years of experience delivering innovative technology solutions, they are a team of over 140,000 professionals committed to creating a more sustainable world through innovation.