CISO (Hybrid in Barcelona)

Michael Page; Barcelona; Presencial; EUR 150.000 - 190.000; Jornada completa

Descripción de la vacante

Michael Page is seeking a senior cybersecurity leader with regional responsibility across multiple countries and subsidiaries. The role focuses on governance, risk management, policy development, and incident response in a highly international environment based in Barcelona.

You will work closely with C-level and Group security leadership, balancing business objectives with security requirements and coordinating security programs across the region with up to 10% international travel.

Formación

• Lead cybersecurity governance, risk management and security strategy across the region and subsidiaries.
• Coordinate security initiatives across multiple countries and subsidiaries.
• Manage ISO 27001 and other security certifications and audits.

Responsabilidades

• Lead cybersecurity governance, risk management and security strategy across the region.
• Build relationships with regional management, country managers and business leaders.
• Coordinate regional response to major cybersecurity incidents and crises.
• Harmonise security practices across entities, including M&A contexts.
• Develop and lead a high-performing Information Security team.

Conocimientos

Cybersecurity governance

Risk management

Security strategy

Executive stakeholder management

Incident response

Descripción del empleo

• High-impact regional leadership role
• Broad scope and transformation exposure

The client is a large international technology and engineering consultancy, operating across multiple countries and supporting complex projects for major global organisations. It offers a highly international, multi-entity environment, with technology and cybersecurity playing a key role in its operations.

• Lead cybersecurity governance, risk management and security strategy across the region and its subsidiaries.
• Build strong relationships with regional management, country managers and business leaders, ensuring cybersecurity risks and priorities are understood at executive level.
• Provide pragmatic, risk-based recommendations, balancing business objectives, operational constraints and security requirements.
• Lead and coordinate security initiatives across multiple countries and subsidiaries, working through influence and matrix management.
• Coordinate the regional response to major cybersecurity incidents and crisis situations.
• Manage ISO 27001 and other Information Security certification processes, as well as security audits and remediation plans.
• Ensure compliance with internal security policies and external legal, contractual and regulatory requirements.
• Support the development and implementation of security policies, procedures, awareness programmes and risk management processes.
• Oversee Information Security throughout the IT service lifecycle, including Security Operations, Security Architecture and Security Assurance.
• Harmonise security practices across the different entities, including in the context of M&A.
• Develop and lead a high-performing Information Security team and promote continuous improvement and professional development.

A senior, high-impact cybersecurity leadership role with regional responsibility across multiple countries and subsidiaries.

• The opportunity to work closely with C-level and Group security leadership, influencing strategic cybersecurity and risk decisions.
• A broad international scope, covering governance, risk, compliance, incident response, security operations and M&A integration.
• Barcelona-based position with up to 10% international travel.