The English-language job board for Spain

Security Management - IRIS2

On-site in Arganda del Rey·Added 1 month ago (last checked 22 Oct)

Hispasat

30 open roles

Apply

Our summary

Work mode: On-site, Arganda del Rey
English: Required
Experience: 4+ years
Education: University degree

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

Requirements

What we're looking for

Minimum requirements

Bachelor's Degree in Industrial Engineering, Computer Science, Information Systems or an equivalent technical discipline; specialisation in cybersecurity or European space law is considered an asset.
4 to 6 years of experience in the implementation and maintenance of security-management systems, preferably in space programmes, governmental satellite communications or critical telecommunications infrastructure.
ISO/IEC 27001 ISMS Lead Auditor certification is required.
Specialist certification in implementation of the Spanish National Security Scheme is required.
Practical expertise in ISO/IEC 27000, ISO/IEC 31000, NIST SP 800-53, CIS Controls, ISO 22301, NIST SSDF, OWASP and SAFECode.
Experience managing classified information.
Knowledge of multi-tier supply chains in European Union programmes, including public procurement, satellite operators, satellite manufacturers, Ground Segment suppliers and technology subcontractors.
Experience assessing security maturity and collaborating on secure-by-design architectures for space and satellite-communications systems.
Knowledge of the EU regulatory framework applicable to critical governmental satellite-communications infrastructure, including NIS2, DORA, EU Secret requirements and Regulation (EU) 2023/588.
Independent judgement, integrity and the ability to act impartially in relation to programme-management authorities.
Strong communication and leadership skills and experience coordinating multidisciplinary teams, auditors and technical and non-technical stakeholders across a pan-European supply chain.
Nationality of an EU Member State and willingness to undergo an EU Secret clearance process.
Fluency in English, both written and spoken; any other European language is considered an asset.

Nice to have

CISSP or CISM certification is highly valued; CISA, CCSP, Cloud Security, CEH, OSCP or CompTIA Security+ certifications are considered assets.

The role

Hispasat, as part of the SpaceRISE consortium, is responsible for the technical implementation and ensuring the success of the IRIS² project, leveraging its extensive experience in satellite communications. This collaboration is essential to provide secure and reliable high-performance communication solutions to the European Union and its member states.

To be part of this project, we are looking for Security Management (SM). The responsibilities of the position are as follows:

What you'll do

Responsibilities

Define, implement and oversee the Information Security Management System and the comprehensive security measures required for the IRIS² programme.
Ensure alignment with EU and ESA security policies, the Concession Agreement, EUSPA security-accreditation standards, applicable project documentation and international frameworks including ISO/IEC 27000 and 31000, NIST SP 800-53, CIS Controls, ISO 22301 and NIST SSDF.
Coordinate and oversee the management and protection of classified programme information in accordance with applicable legislation and regulations.
Define and oversee the programme security-control system, with particular attention to the security requirements established for IRIS².
Ensure compliance with the legal and regulatory security requirements associated with the programme and with instructions from the European Commission, ESA and EUSPA.
Develop and maintain security policies, procedures, guidelines, secure-installation guides and manuals.
Coordinate the integration of protection measures, including encryption, access control and alert monitoring, and oversee vulnerability remediation.
Develop and oversee the programme and supply-chain security-risk matrix, identify internal and external threats, and define and monitor mitigation strategies and plans.
Establish organisational priorities, limits, risk tolerances and assumptions to support internal and supply-chain risk-management decisions.
Oversee operational resilience and business continuity and coordinate continuity plans for normal operations, operations under attack and recovery scenarios.
Oversee technical security plans and the design and coordination of incident-response protocols, ensuring compliance with NIS2 and the programme control framework.
Oversee audits, assess the impact of potential security breaches and define contingency plans.
Coordinate security and cybersecurity activities with other organisational areas, including the Security Operations Centre.
Ensure compliance with security requirements throughout the SpaceRISE consortium's multi-tier supply chain, including prime contractors, subcontractors and suppliers.
Coordinate with programme stakeholders and participate in projects implementing security measures.

How you'll work

Location

Arganda del Rey, Madrid, Spain.

About Hispasat

Hispasat is a Spanish satellite communications operator headquartered in Madrid, providing satellite connectivity solutions across Europe, the Americas, and North Africa. The company operates a fleet of geostationary satellites and is a key player in the distribution of Spanish and Portuguese-language television content, as well as broadband and mobility services. With a strong focus on innovation, Hispasat is actively involved in the European Space Agency's IRIS2 program, a major initiative to develop a secure satellite constellation for the EU, which is driving significant engineering and technical hiring.

Hispasat's Spain presence is centered in Madrid, where most of its engineering, operations, and corporate roles are based. The company offers a professional environment that combines the stability of a well-established operator with the excitement of new space projects like IRIS2. For international professionals, Hispasat provides opportunities to work on advanced satellite systems, ground segments, and 5G networks, with a multicultural team and a commitment to innovation. The company's involvement in European space initiatives makes it an attractive employer for those looking to contribute to large-scale, cross-border projects.

Industry: Satellite Communications
Founded: 1989
Employees: 500–1,000
Headquarters: Madrid, Spain
In Spain: Madrid
Website: hispasat.com

Good to know if you are moving

Hispasat is headquartered in Madrid, Spain, and most roles are based there, offering a central location in the Spanish capital.
The company is a key player in the European IRIS2 program, a major EU initiative to develop a secure satellite constellation, providing opportunities to work on large-scale, international projects.
Hispasat operates in a bilingual environment (Spanish and English), making it accessible for international professionals, though Spanish language skills are often beneficial.
The company offers a range of technical roles, from engineering to operations, with a focus on satellite communications, ground segments, and 5G networks.
As a state-owned company since 2023, Hispasat offers a stable work environment with a strategic role in Spain's and Europe's space ambitions.

In their own words

Additional information

At Hispasat we promote equal opportunities and an inclusive environment. All our selection processes are based on objective criteria, without distinction of gender, age, origin, sexual orientation, disability or other personal or social conditions. We value diversity as a driver of innovation and growth.

All open roles at Hispasat