CISO (Hybrid in Barcelona)

• Engineering degree with 6-10 years of experience in IT Management positions.
• Excellent understanding of Information Security and risk management best practices, including ISO/IEC 27001.
• Strong understanding of project management methodologies, such as PMI, Prince2 and Agile. Relevant certifications are a strong plus.
• Good practical knowledge of security technologies, including Firewalls, IDS/IPS, IAM, SIEM, remote working and cloud technologies.
• Certifications such as CISM, CISSP, CISA or ISO 27001 Lead Implementer are highly desirable.
• Strong communication, presentation and stakeholder management skills, with the ability to influence and represent security topics with senior leadership.
• Proactive, autonomous and self-starting, with the ability to lead and drive organisational change.
• Strong relationship-building skills and ability to influence internal and external stakeholders.
• Fluent English and experience working in an international and multicultural environment.
• Fluent in French.

A senior, high-impact cybersecurity leadership role with regional responsibility across multiple countries and subsidiaries.

• The opportunity to work closely with C-level and Group security leadership, influencing strategic cybersecurity and risk decisions.
• A broad international scope, covering governance, risk, compliance, incident response, security operations and M&A integration.
• Barcelona-based position with up to 10% international travel.

Resumen

• High-impact regional leadership role
• Broad scope and transformation exposure

¿Dónde vas a trabajar?

The client is a large international technology and engineering consultancy, operating across multiple countries and supporting complex projects for major global organisations. It offers a highly international, multi-entity environment, with technology and cybersecurity playing a key role in its operations.

Descripción

• Lead cybersecurity governance, risk management and security strategy across the region and its subsidiaries.
• Build strong relationships with regional management, country managers and business leaders, ensuring cybersecurity risks and priorities are understood at executive level.
• Provide pragmatic, risk-based recommendations, balancing business objectives, operational constraints and security requirements.
• Lead and coordinate security initiatives across multiple countries and subsidiaries, working through influence and matrix management.
• Coordinate the regional response to major cybersecurity incidents and crisis situations.
• Manage ISO 27001 and other Information Security certification processes, as well as security audits and remediation plans.
• Ensure compliance with internal security policies and external legal, contractual and regulatory requirements.
• Support the development and implementation of security policies, procedures, awareness programmes and risk management processes.
• Oversee Information Security throughout the IT service lifecycle, including Security Operations, Security Architecture and Security Assurance.
• Harmonise security practices across the different entities, including in the context of M&A.
• Develop and lead a high-performing Information Security team and promote continuous improvement and professional development.

¿A quién buscamos (H/M/D)?

• Engineering degree with 6-10 years of experience in IT Management positions.
• Excellent understanding of Information Security and risk management best practices, including ISO/IEC 27001.
• Strong understanding of project management methodologies, such as PMI, Prince2 and Agile. Relevant certifications are a strong plus.
• Good practical knowledge of security technologies, including Firewalls, IDS/IPS, IAM, SIEM, remote working and cloud technologies.
• Certifications such as CISM, CISSP, CISA or ISO 27001 Lead Implementer are highly desirable.
• Strong communication, presentation and stakeholder management skills, with the ability to influence and represent security topics with senior leadership.
• Proactive, autonomous and self-starting, with the ability to lead and drive organisational change.
• Strong relationship-building skills and ability to influence internal and external stakeholders.
• Fluent English and experience working in an international and multicultural environment.
• Fluent in French.

¿Cuáles son tus beneficios?

A senior, high-impact cybersecurity leadership role with regional responsibility across multiple countries and subsidiaries.

• The opportunity to work closely with C-level and Group security leadership, influencing strategic cybersecurity and risk decisions.
• A broad international scope, covering governance, risk, compliance, incident response, security operations and M&A integration.
• Barcelona-based position with up to 10% international travel.