Cybersecurity & IT Compliance Manager

• Education: Computer Engineering, Telecommunications, or similar. CISM, CISSP, and ISO 27001 certifications will be valued.
• Languages: Fluent Spanish and English.
• Experience: More than 10 years in cybersecurity, with at least 3 years leading teams or providers.
• Technical knowledge: Security regulations and standards, Zero Trust architecture, identity management, incident response, business continuity, network security, protection tools, and cloud environments.
• Competencies: Leadership, autonomy, decision-making, organization, communication, team coordination, problem-solving, and results orientation.

• Valuable: Experience in industrial cybersecurity (OT/ICS), additional certifications, and other languages..
  

Why join our team?

• Opportunities for professional growth within an international team.
• A flexible compensation plan that includes health insurance, childcare, transportation, and meals, adapted to your needs. It also includes pet insurance.
• Exclusive access to the Bakers Vip Club platform, with discounts on leisure and consumer goods only for our employees.
• Subsidized cafeteria menu, so you can enjoy meals at a reduced cost.
• Europastry breakfast: Start your day with our best products!
• Exclusive employee discount on our Europastry products.
• Access to the on-site gym and paddle tennis courts to maintain your physical well-being!
• Half-day Fridays with an intensive work schedule.
• Lockers available in the building, so you can receive your packages at any time.

The Cybersecurity & IT Compliance Manager is responsible for Europastry's cybersecurity on a global level. They define the group's cybersecurity strategy and lead its execution in all countries where the company is present, both in corporate systems (IT) and in industrial environments (OT). They work from the headquarters in Sant Cugat del Vallès and report directly to the Chief Information Officer (CIO).

• Define the group's cybersecurity strategy and its roadmap, and lead its execution.
• Manage the company's cybersecurity services and projects, from start to finish.
• Lead the cybersecurity operations team and external information security service providers, and supervise their work.
• Coordinate the implementation of cybersecurity measures across the group's countries through the IT personnel at each location.
• Responsible for defining and maintaining the corporate cybersecurity framework, ensuring regulatory compliance (ISO 27001, NIST, IEC 62443, NIS2, EU AI Act, and GDPR), coordinating audits, managing third-party risks, and promoting awareness and continuous improvement.
• Lead security operations and incident response, supervising 24/7 monitoring, forensic analysis, crisis management, vulnerabilities, and technical audits.
• Define the corporate security architecture for IT, OT, and Cloud environments, driving Zero Trust, identity and access management, industrial security, and the selection and implementation of new cybersecurity technologies.