BISO - BUSINESS INFORMATION SECURITY OFFICER

GT Global Talent; Madrid; Presencial; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

GT Global Talent is seeking a Business Information Security Officer (BISO) to lead cybersecurity for a key business area. You will report to the CISO and collaborate with IT, Operations, Compliance and Legal to align cybersecurity with business needs.

You will manage risk, regulatory compliance, and governance across international sites, driving strategic initiatives and stakeholder engagement to strengthen resilience and protect critical infrastructure and operations.

Formación

• University degree in engineering, technology, cybersecurity, risk management or related field.
• Proven experience in cybersecurity governance, risk & compliance (GRC), risk management or similar functions with audits and senior stakeholder interaction.
• Experience in international, distributed and highly regulated environments.
• Knowledge of cybersecurity standards/regulations such as ISO 27001, NIS2 and others.
• High level of English; additional languages a plus.

Responsabilidades

• Cybersecurity Leadership: act as primary cybersecurity representative across an international, multi-site environment.
• Governance, Risk & Compliance: identify and manage cybersecurity risks, coordinate remediation plans and ensure regulatory compliance.
• Strategic Initiatives Coordination: lead cybersecurity programs aligned with business priorities.
• Business & Stakeholder Engagement: collaborate with Business, IT, Operations, Compliance and Legal to embed cybersecurity in projects.
• Audits, Reporting & Governance: participate in audits and provide executive reporting on risks and controls.
• Third-Party Risk Management: oversee risks with external providers and critical third parties.
• Continuous Improvement: contribute to cyber capabilities and strategic roadmaps.

Conocimientos

Strategic mindset

Influence senior stakeholders

Autonomous in international env.

Pragmatic and collaborative

Coordination across teams

Educación

University degree

Descripción del empleo

Leading multinational company specialized in the management of critical infrastructure and energy logistics (oil & gas), with an international presence. The company operates in highly regulated, distributed and operationally critical environments, with a culture built around operational excellence, safety, sustainability and people development.

As part of the evolution of its global cybersecurity operating model, we are looking for a Business Information Security Officer (BISO) to act as the primary cybersecurity representative for one of their business areas. Reporting directly to the CISO, this role will work closely with, IT, Operations, Compliance, Legal and external service providers.

ROLE PROPOUSE:

Lead the cybersecurity function for one of their business areas, ensuring the effective implementation of the company’s cybersecurity strategy within an international, multi-site and highly regulated environment.

MISSION:

Act as the main cybersecurity point of contact for the business, ensuring effective risk management, regulatory compliance and alignment between the global cybersecurity strategy and business operational needs, contributing to a secure and resilient operation.

RESPONSABILITIES

• Cybersecurity Leadership: Act as the primary cybersecurity representative, ensuring the effective implementation of corporate cybersecurity policies, standards and strategy across an international and multi-site environment.
• Governance, Risk & Compliance: Identify and manage cybersecurity risks, coordinate remediation plans, oversee control effectiveness and ensure compliance with regulatory requirements and cybersecurity standards.
• Strategic Initiatives Coordination: Lead and coordinate cybersecurity programmes and initiatives, ensuring effective execution, follow-up and alignment with business priorities.
• Business & Stakeholder Engagement: Work closely with Business, IT, Operations, Compliance and Legal teams to embed cybersecurity into strategic projects and transformation initiatives.
• Audits, Reporting & Governance: Participate in audits, compliance reviews and governance forums, providing executive reporting on cybersecurity risks, controls and initiatives.
• Third-Party Risk Management: Oversee cybersecurity risks associated with external providers and critical third parties, ensuring compliance with the organisation’s security requirements.
• Continuous Improvement: Contribute to the development of cybersecurity capabilities, operating models and strategic roadmaps aligned with the needs of the business.

REQUIREMENTS

• Education: University degree in Engineering, Technology, Cybersecurity, Risk Management, Business Administration or a related discipline.
• Experience: Proven experience in Cybersecurity Governance, Risk & Compliance (GRC), Business Information Security, Risk Management or similar functions, including risk management, audits, compliance programmes and interaction with senior stakeholders.
• International Exposure: Experience within international, distributed and highly regulated environments, ideally in transportation, energy, critical infrastructure or logistics sectors.
• Frameworks & Regulations: Strong knowledge of cybersecurity standards and frameworks such as ISO 27001, NIS2 and other relevant industry regulations.
• Languages: High level of English with the ability to work effectively in international environments. Additional languages will be considered a plus.
• Preferred Certifications: CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Lead Auditor or equivalent certifications.
• Additional Knowledge: Experience or knowledge in Operational Resilience, OT/ICS Security, Third-Party Risk Management, Cybersecurity Programme Governance, GRC platforms, audits, due diligence, RFPs or corporate transformation initiatives.

Skills

• Strategic mindset combined with a strong execution-oriented approach.
• Ability to influence and engage effectively with senior stakeholders.
• Capability to operate autonomously in complex international environments.
• Pragmatic, collaborative and results-driven approach.
• Strong coordination skills across teams, suppliers and cross-functional initiatives.

WE OFFER

• A highly visible role with real influence on the cybersecurity strategy of an international and business-critical operation.
• Participation in global initiatives and collaboration with multidisciplinary teams across multiple countries and operational environments.
• Competitive compensation package and corporate benefits aligned with the experience and responsibilities of the position.