TDS - Junior Information Security Manager (EU/NATO Scope) - Quality and Security Management

1-3 years of experience in one of the following areas:

• Information Security.
• Data protection.
• Document management.
• IT Audit.
• ISO management systems.
• Security or compliance consulting.

Knowledge of the Telecommunications, Defense, NATO, and EU sectors, as well as their regulatory environment.

Desirable: Knowledge of Security Regulations applicable to military, EU, and NATO projects.

Necessary experience or knowledge in general public tender management processes within the EU and NATO spheres.

Security, cybersecurity, and risk management requirements.

Regulations related to data protection (GDPR).

Experience or knowledge of the following will be valued: ISO 9001, AQAP, ISO 31301, ISO 27000, ENS.

Essential: Degree or higher education in any of the following Security disciplines: Cybersecurity, Information and Documentation, Law, Compliance, or related disciplines.

• Essential: spoken and written English (C1 / C2)
• Knowledge of another EU language is desirable.

Telefónica Defensa y Seguridad is the Telefónica Group company specializing in the design, development, implementation, and management of advanced technological solutions in the fields of defense and security. We contribute to the Group's purpose of being the best gateway for citizens, companies, and institutions to digital technologies, bringing innovation closer to the protection of people, critical infrastructures, and essential assets.

We support the Armed Forces, Security Forces and Corps, public administrations, and strategic sector organizations with solutions tailored to their needs. We integrate technology, intelligence, and operational capability to anticipate and respond to threats, reinforce operational continuity and resilience, and generate trust in high-demand environments. www.telefonica.es

We are looking for a methodical, organized person, detail-oriented and with a security mindset, with the ability to understand risks, translate requirements into controls, manage documentation and evidence, perform follow-ups, and detect non-compliance. And with the potential to evolve towards a position of greater responsibility.

Provide support to the organization in Information Security management, regulatory compliance, and associated document management, contributing to the maintenance and improvement of the security governance system, controls, policies, and internal procedures.

Manage relations with clients and official bodies that regulate the applicable regulations in the national, EU, and NATO spheres, as well as projects with clients involving high levels of demand, conflicting motivations and interests, and very rigorous security processes for classified matters and quality.

• The position will work closely with the Information Security Manager, and with the IT, Legal, Risk, Quality, and Operations areas.
• Management, together with the area managers, of activities related to information security within the Telefónica Group.
• Ensure compliance with the Security Regulations applicable to the Ministry of Defense, the EU, and NATO.
• Relationship with the body that regulates and applies security regulations in this matter.
• Development of internal regulations, workflows, access management, etc.
• Documentary control and information security procedures for contracts, following recognized methodologies that allow for the maintenance of the lifecycle, quality, veracity, security, and flow of the growing volume of documents generated, defining internal and external processes and regulations, and ensuring availability.
• Creation, modification, and evolution of the applications and processes of the Telefónica Group's security Management system.
• Support in performing internal and external security audits, documentation, liaison and assistance to auditors, closing of non-conformities, and follow-up on audit results.

• Availability to travel

• Confidentiality and judgment in the handling of sensitive information.
• Organisational skills and attention to detail.
• Ability to work with regulatory procedures and requirements.
• Analytical thinking and risk orientation.
• Fluent communication with technical and business profiles.
• Ability to work in a structured manner and maintain traceability.
• Initiative, willingness, and proactivity.