Chief Information Security Officer (CISO) / Head of Security

WIBX; Barcelona; Presencial; EUR 100.000 - 150.000; Jornada completa

Descripción de la vacante

Una empresa líder en ciberseguridad busca un Chief Information Security Officer (CISO) para dirigir su estrategia global, garantizar la protección de activos críticos y coordinar las certificaciones de ciberseguridad en diversas subsidiarias. El candidato ideal tiene más de 10 años de experiencia en el campo y se encargará de establecer políticas y llevar a cabo evaluaciones de riesgo, mientras fortalece la cultura de seguridad en la organización.

Formación

• 10+ años en información de seguridad.
• Experiencia en gobernanza de seguridad y cumplimiento regulatorio.
• Conocimientos avanzados en infraestructura de TI.

Responsabilidades

• Desarrollo y mantenimiento de la estrategia de ciberseguridad.
• Evaluación y mitigación de riesgos de ciberseguridad.
• Construcción y liderazgo de un Centro de Operaciones de Seguridad.

Conocimientos

Gestión de riesgos

Gobernanza de seguridad

Respuesta ante incidentes

Gestión de crisis

Comunicación

Educación

Máster en Ciencias de la Computación, Ciberseguridad o campo relacionado

Herramientas

ISO 27001

NIST

CIS Controls

OWASP

Descripción del empleo

We are seeking a highly experienced and strategic Chief Information Security Officer (CISO) to lead and oversee the organization’s global cybersecurity strategy, policies, and governance. The CISO will play a pivotal role in protecting the company's critical assets, including information systems, networks, intellectual property, and data across all business units and subsidiaries.

This executive position will also be responsible for coordinating the certification and compliance efforts of the company's subsidiaries, ensuring alignment with group-wide cybersecurity standards and regulatory requirements.

Key Responsibilities

Cybersecurity Strategy & Governance

• Develop, implement, and maintain a comprehensive cybersecurity strategy aligned with business objectives and risk appetite.
• Maintain the Information Security Management System (ISMS) for the group.
• Establish policies, standards, and frameworks to continuously improve the company’s security posture.

Risk Management & Asset Protection

• Identify, evaluate, and mitigate cybersecurity risks across the organization and its subsidiaries.
• Conduct regular security risk assessments and penetration testing to protect systems and data.
• Lead efforts to secure critical infrastructure, proprietary data, and operational technologies

Subsidiary Certification & Alignment

• Coordinate and oversee the cybersecurity certification processes (e.g., ISO 27001, NIS2, DORA ) across all subsidiaries.
• Support local Managers to ensure harmonization of security standards across the group.
• Monitor subsidiary compliance with group policies, legal and regulatory frameworks.

Incident Response & Threat Management

• Build and lead a Security Operations Center (SOC) and incident response team.
• Build and lead a Vulnerability Operations Center ( VOC)
• Drive Cyber Crisis Simulation Exercise
• Develop and execute incident response plans and forensics capabilities.
• Stay up to date with emerging threats, vulnerabilities, and regulatory changes.

Awareness, Training & Culture

• Promote a strong security culture within the organization.
• Define and implement security awareness training programs for all employees.
• Serve as the internal advocate for security best practices.

Stakeholder Communication & Reporting

• Report regularly to executive leadership and the Board of Directors on cybersecurity risks, incidents, and compliance status.
• Act as the key contact for external auditors, regulators, and partners regarding information security matters.

Requisitos del puesto

Education

• Master's degree in Computer Science, Cybersecurity, or related field.

• Relevant certifications preferred: CISSP, CISM, CISA, ISO 27001, SANS/GIAC.

Experience

• 10+ years in information security.

• Proven experience in security governance, risk management, and regulatory compliance (e.g., ISO 27001, GDPR, NIS2).

• Strong background in IT infrastructure.

Skills

• Deep knowledge of threat landscapes, incident response, mitigation strategies.

• Familiarity with security frameworks: ISO 27001, NIST, CIS Controls, OWASP.

• Capable of leading security audits, penetration tests, BCP/DRP, and compliance assessments.

• Understanding of legal and regulatory cybersecurity issues.

Soft Skills & Leadership

• Strong leadership and team management skills.

• Excellent communicator, able to engage both technical teams and executive leadership.

• Strategic thinker, able to align security vision with business goals.

• Analytical mindset, crisis management, and prioritization skills.

Languages

• Professional English (spoken and written) required for international communication.

Otros datos del puesto

Location: Spain or France

Department : TBD

Employment Type: Full-time

Reports to: TBD