Chief Information Security Officer Europe

Gracia101 Talent Solutions; Barcelona; Presencial; EUR 120.000 - 180.000; Jornada completa

Descripción de la vacante

Gracia101 Talent Solutions is seeking a Regional CISO for a Barcelona-based role. The incumbent will define and drive the regional information and cybersecurity agenda in partnership with Group CISO and Regional CIO, ensuring protection of business, customer, partner and employee data.

The role emphasizes risk-based security leadership, governance across countries, and collaboration with executive management to align security with business objectives and regulatory requirements.

Formación

• 6–10 years of IT management and/or cybersecurity leadership.
• Strong knowledge of information security and ISO 27001.
• Experience with IAM, firewalls, IDS/IPS, SIEM, cloud and remote-working environments.
• CISSP/CISM/CISA or ISO 27001 Lead Implementer or equivalent cert desirable.
• Proven experience in international, multicultural, matrix organizations.

Responsabilidades

• Define and execute regional cybersecurity strategy, governance and risk management framework.
• Build strong relationships with Regional Management, Country Managers and Business Leaders.
• Establish clear security accountability, risk ownership and decision-making across the region and subsidiaries.
• Lead regional cybersecurity initiatives through collaboration across multiple countries.
• Provide pragmatic, risk-based security recommendations aligned with business objectives.
• Coordinate regional response to major cybersecurity incidents and crisis situations.
• Ensure compliance with internal security policies and external regulatory requirements.
• Lead ISO 27001 and other relevant security certification and audit activities.
• Drive continuous improvement of security policies, processes, technologies and practices.
• Promote security awareness and a strong risk management culture.

Conocimientos

Information security

Cybersecurity leadership

Risk management

ISO 27001 knowledge

Educación

CISSP/CISM/CISA or ISO 27001 Lead Implementer

Herramientas

IAM

Firewalls

IDS/IPS

SIEM

Cloud security

Descripción del empleo

BARCELONA BASED ROLE. The Regional CISO is a senior leadership role responsible for defining and driving the regional Information & Cyber Security agenda, in partnership with the Group CISO, Group Operational CISO and Regional CIO.

The role ensures that cybersecurity risks are effectively identified, assessed and managed, while maintaining the confidentiality, integrity and availability of business, customer, partner and employee information. The CISO works closely with executive management to establish appropriate risk levels and ensure security investments and priorities support business objectives.

Key Responsibilities

• Define and execute the regional cybersecurity strategy, governance and risk management framework.
• Build strong relationships with Regional Management, Country Managers and Business Leaders, ensuring cybersecurity risks, priorities and investments are understood and supported.
• Establish clear security accountability, risk ownership and decision-making across the region and subsidiaries.
• Lead regional cybersecurity initiatives through collaboration, influence and matrix management across multiple countries.
• Provide pragmatic, risk-based security recommendations aligned with business objectives and operational requirements.
• Coordinate regional response to major cybersecurity incidents and crisis situations, working closely with Group Security.
• Ensure compliance with internal security policies and external legal, regulatory and contractual requirements.
• Lead and coordinate ISO 27001 and other relevant security certification and audit activities.
• Drive continuous improvement of security policies, processes, technologies and practices in line with industry standards and best practices.
• Promote security awareness and a strong risk management culture across the region.
• Ensure security is embedded throughout the IT service lifecycle, including Security Operations, Architecture and Assurance.
• Support customer and business engagements on cybersecurity matters, including audits and security questionnaires.
• Harmonize security practices across countries and subsidiaries, including in the context of M&A.
• Lead and develop a high-performing regional Information Security team, fostering talent, innovation and continuous improvement.
• Report cybersecurity risks, performance and key initiatives to regional management and governance committees.

Education & Experience

• 6-10 years of experience in IT management and/or cybersecurity leadership roles.
• Strong knowledge of information security, cybersecurity risk management and standards such as ISO 27001.
• Experience with security technologies including IAM, firewalls, IDS/IPS, SIEM, cloud and remote-working environments.
• Strong understanding of project and change management methodologies.
• CISSP, CISM, CISA, ISO 27001 Lead Implementer or equivalent certification is highly desirable.
• Proven experience working in international, multicultural and matrix organizations.