The English-language job board for Spain

Information Security Specialist

On-site in Madrid·Added yesterday (last checked 20 Oct)

OCASO

29 open roles

Apply

Overview

Work mode: On-site, Madrid
English: Required
Experience: 3+ years
Education: University degree

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

This job advert was originally written in Spanish.

Requirements

What we're looking for

University degree in Computer Science or similar studies (diploma, engineering, licenciatura, or bachelor's degree).
Senior experience in IT security risk analysis (minimum 3 years), comprising risk identification and the definition, implementation, and evaluation of technical and organizational security controls for mitigation, as well as the management of related projects.
Advanced knowledge of information security management (ISO 27000, NIST, ENS, etc. standards) and ICT risk analysis methodologies (Magerit, Threat Modeling, etc.)
General certification in information security (ISC2 CISSP, SANS GSEC, ISACA CISA, PECB ISO 27000, ISMS CCSP, Cybersecurity Master's, or equivalents)
B2 (Upper Intermediate) level in technical written English.
Experience in security technologies:
- System or application vulnerability management: Qualys VMDR and Kiuwan Code security
- Web application security audits and pentesting: Burp, Acunetix, Qualys WAS, OWASP Zap, etc.
- IPS: Checkpoint Threat Prevention, VMware NSX-T Distributed IPS, etc.
- WAF: Netscaler Application Firewall or similar
- Network FW: Checkpoint Access Control, VMware NSX-T Distributed FW, GCP VPC firewall rules, etc.
- Identity management: IBM Security Access Manager and IBM Security Identity Manager

Nice to have

Additional valued capabilities:
- Technical vulnerability management standards (CVSS, Threat Modeling, MITRE ATT&CK, and related)
- Secure Application Development (SSDLC) and web application security best practices (OWASP)
- Security in Cloud IaaS platforms (GCP, Azure, IBM Cloud, etc.)
- Container security best practices (Docker and similar).
- Cryptography and encryption of information in transit and at rest.

The role

Risk identification, assessment of security requirements, definition, implementation, and evaluation of technical and organizational security controls, management of security control implementation projects, executed either directly by the IT Security Area or by other business units.

What you'll do

IT Security risk analysis
Management of IT Security projects and solutions
IT Security testing and approvals
Support in IT Security tasks

About OCASO

OCASO is a Spanish insurance company headquartered in Madrid, offering a broad portfolio of insurance products including health, life, home, and auto coverage. With a strong focus on the domestic market, OCASO operates through a network of offices and intermediaries, serving both individuals and businesses across Spain.

For international professionals, OCASO provides opportunities primarily in sales, customer service, and operational roles within the Spanish insurance sector. The company's work culture is rooted in traditional Spanish business practices, and while Spanish language proficiency is typically essential, the company offers a stable and established environment for those looking to build a career in insurance in Spain.

Industry: Insurance
Employees: 1,000–5,000
Headquarters: Madrid, Spain
In Spain: Madrid
Website: ocaso.es

Good to know if you are moving

OCASO is headquartered in Madrid, Spain, and is a domestic insurance provider with a strong local presence.
The company primarily operates in the Spanish market, so fluency in Spanish is likely required for most roles.
International hires may find opportunities in sales, customer service, and operational positions, but the company is not known for a globally diverse workforce.
As a Spanish company, OCASO offers a traditional work environment, with a focus on local insurance regulations and practices.

All open roles at OCASO