Information Security Manager

What advantages will you have by being part of our team? 💙

• Transformative projects. At Telefónica, you will be part of high-impact projects that set trends and address the connectivity and digital transformation challenges of our society.
• Professional development. You will have a long career path and learning opportunities on a global scale, thanks to our presence in different geographies. We will share with you opportunities for development, training and mobility options. We want to grow and build a future with you!
• Flexibility. We are committed to the balance between professional and personal life. At Telefónica, we care about flexibility, positioning ourselves as a benchmark in new ways of working and work-life balance measures.
• 27 working days of vacation to enjoy.
• Social benefits. You will be able to enjoy a comprehensive package of social benefits, including:
• • Life and accident insurance
  • Medical insurance for you and your family unit (spouse and children)
  • Meal voucher card
  • Flexible benefits plan with numerous options to choose from.
  • Pension plan

And much more!

We connect the present. We transform the future.

Have you ever wondered what makes it possible for millions of people to be connected at the same time, from anywhere in the world, without anything failing?

At Telefónica, we make it possible.

We are a global telecommunications and technology company that connects people, businesses, and communities through next-generation networks and advanced digital solutions such as cloud, artificial intelligence, IoT, and cybersecurity.

With over 100 years of history, we work every day to ensure that innovation serves society, driving a digital transformation that is responsible, sustainable, and has real impact.

Here, we don't just design infrastructure—we design the future. We are looking for people who are curious, enthusiastic, and passionate about what they do, who never settle, and who want to build the Telefónica of tomorrow.

If you are passionate about technology that transforms lives, this is your place.

The Digital Security Unit, integrated into the Global Security and Intelligence Directorate, leads the protection of Telefónica's corporate technology ecosystem. It defines and implements the cybersecurity strategy, ensuring regulatory compliance (GDPR, SOX, DORA, among others) and risk control across systems, services, and the supply chain.

It operates transversally across complex technology environments (cloud, hybrid infrastructures, Big Data, AI, IoT, DevOps), promoting security by design and a cybersecurity culture throughout the group, in coordination with areas such as Technology, Risk, Legal, Privacy, and Audit.

It involves participating in the planning, execution, and governance of digital security across corporate systems and services. Ensuring the deployment of controls, regulatory compliance, and proper risk management, acting as a coordination point between business, technology, and governance bodies.

How will you contribute to the purpose of the role with your skills? 💼

1. Security Management in Technology Projects

The professional will oversee the security lifecycle of projects and services within their scope of action. Likewise, they will act as the primary point of contact and facilitator for different internal and external stakeholders (suppliers) regarding security matters.

1. Governance, Internal Control, and Regulatory Compliance

They will advise on the implementation, maintenance, and updating of corporate standards, security policies, and regulatory frameworks applicable to global assets. They will collaborate in the processes of preparing, collecting, and validating evidence required for internal, external, and regulatory audits, ensuring the standardization of IT controls. Their focus will be oriented towards the effective operationalization of governance frameworks, supervising that infrastructure and applications comply with the group's regulatory and internal control requirements.

1. Advanced Security Risk and Exceptions Management

They will direct and supervise security risk analysis and assessment processes, both in internal projects and across the supply chain and third parties with access to the corporate perimeter. The profile requires judgment in defining risk treatment strategies, validating functional and architectural changes with security impact, and managing the complete lifecycle of security exceptions.

1. Security by Design and Technology Enablement

Ensuring the adoption and integration of Security by Design principles from the conceptual and early stages of the development and systems lifecycle (SSDLC). The role will actively participate in architecture forums and technical committees to assess the viability of solutions before their promotion to production environments. Likewise, they will drive the prioritization and tracking of remediation plans for critical vulnerabilities identified in assets, ensuring that implemented mitigation measures remain strictly aligned with the business risk profile.

1. Operational Control and Oversight of Security Services

They will continuously supervise the execution and efficiency of recurring operational processes related to information security. The role requires ensuring the proper functioning of corporate services under standardized models, coordinating service channels for managing operational requests, temporary exceptions, and validating security alerts. The candidate will act as a liaison providing support in incident management.

1. Performance Reporting and Executive Metrics Analysis

They will participate in consolidating the data required for the Security management dashboard by extracting and analyzing Key Performance Indicators. They will use this information to prepare periodic security positioning reports for the Global Security Directorate and governance committees. They will identify trends, anticipate deviations, and propose continuous improvement plans based on data linked to this process.

1. Economic, Financial, and Supplier Management

They will collaborate in the preparation, defense, and monitoring of the annual budget plan (OPEX and CAPEX) assigned to the security management team. The profile will coordinate the economic execution of budget lines, control variances, and provide specialized support in drafting technical and administrative contractual documentation (Technical Specifications, RFPs, Service Level Agreements) necessary for the homologation, contracting, and lifecycle management of services and products supporting the management function.

1. Cross-functional Coordination and Organizational Alignment

Acting as a strategic liaison and catalyst between the company's different organizational units (Business, Operations, Systems, Privacy, Legal Counsel, Risk, etc.). The position demands a high capacity to manage complex expectations and competing priorities in a dynamic corporate environment. They must facilitate executive decision-making by transforming complex technical data into structured information.

1. Leadership, Team Management, and Mentorship

They will lead, organize, and prioritize the daily activities of the team under their responsibility, fostering a collaborative, rigorous, and strongly results-oriented work environment. The role holder will be responsible for setting individual and collective objectives, monitoring professional performance, and fostering the development of technical capabilities and skills within the team. Their function will be to promote a culture of continuous improvement, empowerment, and high methodological accountability.

1. Promoting Cybersecurity Awareness and Culture

They will design, supervise, and promote the security awareness and training strategy within the scope of the management team and with global reach. The position involves coordinating the creation and launch of periodic threat simulation campaigns (such as social engineering/phishing), defining training paths on corporate learning platforms, and developing technical and awareness-raising informational content aimed at consolidating security best practices within the Group's organizational culture.