The English-language job board for Spain

Senior Cybersecurity Project Manager

Hybrid in Madrid·Added today (last checked 23 Oct)

Amaris Consulting

23 open roles

Apply

Our summary

Work mode: Hybrid, Madrid
English: Required
Experience: 5+ years

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

Requirements

What we're looking for

5-8 years of experience managing cybersecurity projects.
Experience in GRC, cybersecurity risk management or security governance.
Proven experience identifying, assessing and tracking project and implementation risks.
Ability to coordinate mitigation plans with IT, security and business teams.
Knowledge of CRM, e‑commerce or other business‑critical applications.
Strong communication, organization and stakeholder management skills.
High level of English for daily collaboration with international teams.
A proactive, structured and autonomous mindset, able to drive risk remediation and follow‑up without constant supervision.

🧠 Your mindset & soft skills

Strong analytical and problem‑solving skills, applied to cybersecurity risks and prioritization.
Excellent stakeholder management: able to influence without direct authority and align diverse teams.
Confident in leading meetings, challenging decisions when needed, and defending security priorities.
Comfortable working in international and multicultural environments, adapting your communication to different audiences (technical, business, management).
Proactive, structured and autonomous, with a strong sense of ownership and accountability.

Nice to have

Salesforce experience is a strong plus.

✨ Nice to have

Hands‑on experience with Salesforce security or other major CRM / e‑commerce platforms.
Experience with risk management frameworks or security standards (ISO 27001, NIST, etc.).
Security or GRC certifications (e.g. CISM, CISSP, ISO 27005, ISO 27001 Lead Implementer/Auditor) are a plus.
Experience in multinational or multi‑country environments.

Pay & benefits

What you'll get

🚀 Why join us?

Join a fast‑growing global consulting group with strong cybersecurity and GRC practices.
Work in a hybrid model in Madrid within an international environment (projects and teams across Europe and beyond).
Develop your skills in cybersecurity risk management, GRC, Salesforce/CRM/e‑commerce security and security governance.
Grow your career within Amaris Consulting and the Mantu Group, with access to international opportunities and continuous learning.

The role

Join Amaris Consulting and manage cybersecurity risks across strategic digital projects (Salesforce, CRM, e‑commerce) for a leading international group in its sector. Be part of an international cybersecurity & GRC team, grow in a hybrid environment in Madrid, and develop your career within a global organization that values ownership, collaboration, and technical excellence.

🎯 Your mission & impact

As a Senior Cybersecurity Project Manager - GRC & Digital Platforms (Salesforce / CRM / e‑commerce), you will ensure that cybersecurity risks are identified, assessed, mitigated and monitored across key projects and platforms in an international environment. You will work closely with technical, security and business teams to coordinate mitigation plans, follow up on action plans and support security governance activities.

🧩 Mission description

What you'll do

You will:

Manage cybersecurity risks across projects involving Salesforce, CRM and e‑commerce platforms.
Identify and assess implementation and operational risks throughout the project lifecycle.
Coordinate mitigation actions with technical, security and business stakeholders.
Monitor security controls, incidents and action plans, ensuring proper follow‑up and escalation when needed.
Contribute to GRC activities: risk registers, control frameworks, policies, and compliance follow‑up.
Support security governance: preparation of committees, reporting, and decision‑making support for management.

🛠 What you will do (day‑to‑day)

Work with project managers and product owners to integrate cybersecurity requirements into project plans.
Lead risk assessments for Salesforce, CRM and e‑commerce projects (design, implementation, run).
Define and follow risk treatment plans: mitigation measures, responsible owners, deadlines and status.
Coordinate with security architects, engineers and business stakeholders to ensure controls are implemented.
Track and report on security incidents, non‑compliances and action plans related to your perimeter.
Prepare and present risk dashboards and KPIs to steering committees and management.
Contribute to policies, standards and procedures related to project security and application security governance.
Support awareness and communication on cybersecurity risks to project and business teams.

About Amaris Consulting

Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses, gathering 7,600 people across 5 continents and more than 60 countries. With more than 1,000 clients worldwide, its experts work across sectors ranging from financial services and transportation to healthcare and technology, organized around practices such as Life Sciences, IS & Digital, Telecom, and Engineering, plus Centers of Excellence covering areas like Agile Transformation, Quality Assurance, Health Economics & Market Access, and Advanced Application Development. The firm is part of Mantu, an international consulting group with a turnover of 1 billion and 12,000 people, headquartered in Geneva, Switzerland.

Amaris lists Spain among its countries of presence and is actively hiring there, with current openings including IT & Digital Project Manager, Senior Java Developer, Cybersecurity Engineer, Data Engineer - Spanish speaker, and several pharma-focused automation and clinical project roles. The company describes itself as an equal opportunity workplace and affirmative action employer, and highlights a workforce of 110+ nationalities, which points to a multicultural environment. Candidates should note that Amaris communicates only through its official email domains (amaris.com or mantu.com) and never requests money or personal details via informal channels.

Industry: Consulting
Founded: 2007
Employees: 7,600
Headquarters: Geneva, Switzerland
Website: amaris.com

Good to know if you are moving

Amaris operates in more than 60 countries across 5 continents with a workforce of 110+ nationalities, indicating a highly international environment.
The company is an equal opportunity workplace and affirmative action employer, committed to equal employment opportunity regardless of national origin, citizenship, and other protected characteristics.
Amaris is actively hiring in Spain, with open roles including IT & Digital Project Manager, Senior Java Developer, Cybersecurity Engineer, Data Engineer - Spanish speaker, and pharma automation leads.
Some Spain-based roles, such as Data Engineer, explicitly require Spanish, so language requirements vary by position.
The company warns candidates about recruitment scams: it only uses official email domains (amaris.com or mantu.com) and never requests money or personal details via informal channels.

In their own words

Additional information

At Amaris Consulting, we are committed to creating an inclusive environment. We welcome all qualified applications regardless of gender, sexual orientation, race, ethnicity, age, or any other characteristic.

All open roles at Amaris Consulting