Information Security Specialist

On-site in Madrid·Added yesterday

Iberia

37 open roles

What they ask for

  • Have the right to work in Spain

    No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

  • Work in English

    English is required, per the ad.

  • Work on-site in Madrid

    No relocation package mentioned.

This job was automatically translated to English,.

The role

The Safety Directorate needs to fill an Information Security Specialist position, in direct coordination with the Information Security managers and the Operations, Maintenance, and IAG Engine Tech areas, under the regulatory requirements of the PART IS standard.

What you'll do

The professional challenge of the position is to manage and coordinate the operation of the Information Security Management System (ISMS) within the scope of PART-IS, ensuring that information security risks that may have an impact on operational safety are properly identified, assessed, treated, monitored, and communicated.

The position will contribute to ensuring the implementation, maintenance, and continuous improvement of the ISMS in the operational and maintenance environments included in PART-IS, facilitating the integration of information security requirements with operational safety, regulatory compliance, and the various business and technology areas.

Responsibilities

  • Manage and develop the ISMS within the scope of PART-IS, including the relevant activities associated with AOC, CAMO, ATO, Part-145, and IAG Engine Tech.
  • Supervise the implementation, maintenance, and continuous improvement of the ISMS, ensuring the effective integration of PART-IS requirements into the company's management system.
  • Coordinate information security risk management, including its identification, assessment, treatment, mitigation, and monitoring, especially when they may affect operations, maintenance, or operational safety.
  • Work together with the Information Security, Safety, Operations, Maintenance, IAG Engine Tech, and Technology areas to identify risks and define appropriate mitigation measures.
  • Coordinate the application of applicable information security policies, standards, and controls, ensuring their awareness and compliance by the involved areas.
  • Interpret and translate the requirements, instructions, and guidelines of the competent aeronautical authorities into operational procedures and controls, including the management of any identified deficiencies.
  • Participate in the relevant Safety and Security governance bodies, promoting coordination between both disciplines.
  • Ensure that changes or the incorporation of new assets with a potential impact on the PART-IS risk profile are incorporated into the risk management process.
  • Collaborate in information classification and protection, as well as in the management of incidents, suppliers, and third parties within the scope of application.
  • Maintain the documentation, traceability, and evidence necessary to demonstrate PART-IS regulatory compliance and facilitate audit and supervision processes.

Essential requirements for the position

description

Our company

Additional information

  • Analytical skills.
  • Ability to coordinate and work in multidisciplinary teams.
  • Ability to influence and manage stakeholders.
  • Orientation towards compliance, excellence, and continuous improvement.
  • Transversal vision.
  • Initiative, autonomy, assertiveness, and the ability to drive a positive safety culture.
  • Good level of communication and ability to interact with others.
  • Adaptability to change.
  • Aligned with the common project.

Talent at Iberia

Requirements

What we're looking for

  • University degree in Information Technology, Telecommunications, Computer Science, Engineering, Cybersecurity, or Information Security.
  • Minimum English level B2.
  • Training and practical knowledge of PART-IS as an applicable regulatory framework.
  • Knowledge and experience in information security risk management, including identification, assessment, treatment, mitigation, and monitoring.
  • Experience in the implementation, operation, or maintenance of an Information Security Management System (ISMS).
  • Knowledge of security governance, policies and controls, incident management, third-party security, and regulatory compliance.
  • Ability to understand the relationship between cybersecurity/information security and aeronautical operational safety, identifying when an information security risk may have consequences for the operation.
  • Experience in coordination with IT, business, operations, risk, audit, and compliance areas, as well as in the management of documentation and evidence typical of regulated environments.

Nice to have:

Nice to have

  • Knowledge of ISO/IEC 27001, training in Safety Management Systems (SMS), risk management, or aeronautical regulations.
  • Professional certifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer/Lead Auditor, or equivalents.
  • Previous experience in the aeronautical sector, safety-critical environments, or sectors with a high level of regulation.

Personal characteristics and management skills

About Iberia

Iberia is the flag carrier airline of Spain and one of the largest airlines in Europe, operating a broad international network from its hub at Madrid-Barajas Airport. The company is part of the International Airlines Group (IAG), alongside British Airways, Vueling, and LEVEL, and is a founding member of the Oneworld alliance. With a fleet of over 100 aircraft, Iberia serves more than 100 destinations across Europe, the Americas, Africa, and the Middle East, and is a major player in the maintenance, repair, and overhaul (MRO) sector, with its own hangars and workshops in Madrid.

Iberia has a significant presence in Spain, with its headquarters and main operational base in Madrid, and a major maintenance hub in La Muñoza. The company is a key employer for aviation professionals in Spain, particularly for engineers, technicians, and pilots. For international hires, Iberia offers a multicultural work environment and the opportunity to work in a leading European airline, with roles ranging from aircraft maintenance and engineering to commercial and digital positions. The company's culture emphasizes technical excellence and operational safety, and it is a relevant option for professionals looking to relocate to Spain.

Industry
Aviation
Founded
1927
Employees
20,000–50,000
Headquarters
Madrid, Spain
In Spain
Madrid, Barcelona, Palma de Mallorca
Website
iberia.com

Good to know if you are moving

  • Iberia is part of the International Airlines Group (IAG), a multinational holding, which can offer opportunities for internal mobility across its airlines (British Airways, Vueling, etc.).
  • The company's official working language is Spanish, but English is widely used in technical documentation and in many operational areas, making it accessible for international professionals.
  • Iberia has its own MRO (Maintenance, Repair, and Overhaul) division with large facilities in Madrid (La Muñoza), offering specialized roles for aircraft maintenance engineers and technicians.
  • The company runs a specific training program for new maintenance technicians (Programa de Formación), starting in October, which can be an entry point for international candidates.
  • Many roles, especially in engineering and maintenance, require EASA Part-66 licenses or equivalent certifications, which are internationally recognized and can be a valuable asset for professionals.

In their own words

About the company & team

We are Spain's largest airline and leader between Europe and Latin America; we belong to the IAG airline group and are part of the oneworld alliance. Our goal is to always be the best option for travel for our customers and to make them feel that what is most important to us is their safety and the quality and experience of their journey. In addition to the airline, we have aircraft maintenance as a complementary business.

At Iberia, we value that our professionals are an example of behaviors for customers, but also within the team. We expect all new hires to be an example of these.

Professional Challenge

We value that our professionals are an example of behaviors for customers, but also within the team. We expect all new hires to be an example of these.

  • We are one and diverse: You work in a coordinated, open, and collaborative manner pursuing a common goal in a diverse and inclusive environment.
  • We put soul and passion: You make things happen by fully committing to everything you do.
  • We reinvent tomorrow: You look for new and different ideas to solve problems.
  • We connect with our customers and colleagues: You always want to go a step further than expected with a smile and a pleasant manner.
  • We make it simple and efficient: We focus on what matters, analyze situations, and eliminate what does not add value.
  • We carry safety in our DNA: We work with the attention and care of the first day: in every ground operation, in every flight. We know the processes and apply them rigorously.

Our commitment to Diversity and Inclusion

Additional information

At Iberia, we are one and diverse. We are a faithful reflection of today's society and have teams with very diverse profiles that enrich us to be more creative and innovative.

We believe in talent without labels and are fully committed to offering the same professional opportunities to everyone. Therefore, all decisions in our selection processes are based exclusively on the competencies, skills, and knowledge necessary for the performance of the position.

All open roles at Iberia
WhatsApp