> Markdown version of [/jobs/ext/2427836-information-security-officer](https://www.wearedevelopers.com/jobs/ext/2427836-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Officer - **Company:** Búsqueda Avanzada - **Location:** Madrid, Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Tisax, Google Cloud - **Published:** August 13, 2026 - **Apply:** https://www.adzuna.es/contact-us.html ## About the Role + 7+ years of hands-on experience in information security and GRC, ideally within a B2B SaaS environment. + Fluent English proficiency, both written and spoken. + Proven experience leading at least 5 successful ISO 27001 certification projects as an implementer, auditor, or both, preferably within startup or mid-market environments. + At least 2 years of experience managing or leading people and teams. + Hands-on experience using a GRC platform or comparable security and compliance management tools. + Strong understanding of cloud infrastructure across AWS, Azure, and GCP, including security posture analysis and remediation planning. + Excellent project management skills, with the ability to turn ambiguous initiatives into concrete deliverables, prioritize effectively, and drive projects through to completion. + Exceptional written communication skills, particularly the ability to create clear and precise compliance content for diverse audiences including auditors, founders, engineers, and customers. + Strong ownership and execution mindset, with the ability to operate independently as a senior individual contributor without waiting for detailed direction. + Strong stakeholder management and communication skills, with the confidence to work across technical, commercial, and leadership teams. + Experience implementing additional frameworks such as SOC 2, GDPR, NIS 2, or similar standards is a plus. + Experience mentoring or coaching colleagues in compliance, audit, information security, or GRC is advantageous. + Previous experience working in a startup or high-growth technology company is beneficial. ## Description This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Security Lead based in Spain. This is a senior information security and GRC leadership opportunity within a fast-growing, remote-first technology environment. You will take ownership of the quality, depth, and evolution of a multi-framework compliance offering supporting modern businesses across Europe. The role combines hands-on security and compliance delivery with team leadership, customer engagement, and strategic roadmap ownership. You will work across frameworks including ISO 27001, SOC 2, GDPR, TISAX, NIS 2, DORA, and other emerging standards. Your expertise will directly influence customer outcomes, audit readiness, compliance content, and the development of security-focused product capabilities. You will collaborate closely with customers, auditors, product and engineering teams, customer success, sales, and senior leadership. The position offers significant autonomy and impact for an experienced security professional who enjoys building scalable processes and turning complex requirements into practical solutions. Accountabilities + Own and drive the compliance roadmap across multiple frameworks, including ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, and additional frameworks as the offering expands. + Lead end-to-end ISO 27001 implementation and related compliance projects for customers. + Mentor, coach, and upskill compliance specialists by sharing expertise, reviewing work, and promoting consistency across audits and customer deliverables. + Conduct internal audits for strategic and complex customers and review audits completed by junior team members to maintain high standards of quality. + Act as a senior compliance partner for customer success and sales teams, providing timely guidance on complex customer questions and participating in customer calls when specialist expertise is required. + Own and continuously improve compliance content, including policies, evidence templates, compliance playbooks, security awareness training, and related resources. + Identify framework gaps and incorporate auditor feedback into internal processes, team practices, and platform improvements. + Partner with product and engineering teams to translate compliance requirements and gaps into clearly defined product initiatives. + Collaborate with customer success, product, and senior leadership to align compliance priorities with customer needs and business objectives. + Strengthen relationships with certification partners and support auditor enablement by helping them understand and effectively use the compliance platform during customer audits. + Bring a strong ownership mindset to ambiguous initiatives, independently defining priorities, translating them into actionable plans, and driving execution. ## Related Videos - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)