Data Protection and Information Security Specialist

Oesía Group; Rivas-Vaciamadrid; On-site; EUR 42,000 - 62,000; Full time

Job summary

Oesía Group busca un/a Especialista en Protección de Datos y Seguridad de la Información para un proyecto en Madrid, en modalidad híbrida. Se requieren al menos 3 años de experiencia y dominio de GDPR, seguridad de la información y marcos de cumplimiento.

Entre las responsabilidades se encuentran DPIAs, gestión de riesgos, revisión de contratos y formación en privacidad para equipos multifuncionales. Proyecto estable, con crecimiento y entorno internacional.

Qualifications

• Conocimientos en protección de datos, privacidad y cumplimiento normativo.
• Sólidos conocimientos de GDPR, seguridad de la información y marcos de cumplimiento.
• Experiencia con DPIAs, evaluaciones de riesgos y auditorías de cumplimiento.
• Conocimiento de manejo de información clasificada y regulaciones de la OTAN.

Responsibilities

• Garantizar el cumplimiento de GDPR y normativas nacionales y marcos de seguridad.
• Mantener y actualizar RoPA (Registros de Actividades de Procesamiento).
• Realizar DPIAs y evaluaciones de riesgos.
• Revisar contratos y acuerdos de procesamiento de datos.
• Gestionar brechas de seguridad y incidentes de protección de datos.
• Desarrollar políticas y procedimientos de privacidad y documentación asociada.
• Impartir formación en privacidad y protección de datos.

Skills

Protección de datos

GDPR

Seguridad de la información

DPIAs

Evaluaciones de riesgo

Auditorías de cumplimiento

Reglamentos de NATO

Gestión de stakeholders

Job description

Data Protection and Information Security Specialist

¡At Oesia Group, we are growing! We would like to count on you for our next job offer:
We are looking fora Data Protection and Information Security Specialist to join an important Project located in Madridin Hybrid job modality.

What are we looking for?

• An/a Data Protection and Information Security Specialist, with at least 3years of experience.
• Availability to join a stable project in Madrid.
• Degree:
• Work Model:Hybrid
• Work Schedule:Complete

Requirements:

• Experience in data protection, privacy, and regulatory compliance.
• Strong knowledge of GDPR, information security, and compliance frameworks.
• Experience with risk assessments, DPIAs, and compliance audits.
• Knowledge of classified information handling and NATO regulations.
• Ability to address both technical and legal privacy matters.
• Strong communication, stakeholder management, and training skills.

What will your responsibilities be?

• Ensure compliance with GDPR, national data protection regulations, and security frameworks.
• Maintain and update the Records of Processing Activities (RoPA).
• Conduct Data Protection Impact Assessments (DPIAs) and risk assessments.
• Review contracts and data processing agreements.
• Manage data breaches and security incidents.
• Develop privacy policies, procedures, and related documentation.
• Deliver privacy and data protection training and awareness activities.
• Provide advice on projects involving classified information and critical infrastructures.

What we offer you?

• Work in a multinational company recognized as one of the best companies to work for in 2025, according to Actualidad Económica and Forbes.
• Stable and innovative technological projects for leading national and international clients.
• Career plan: we offer an attractive professional career based on experience and personal potential within a continuously evolving company with solid growth.
• Free access to various training platforms, providing you with a wide multidisciplinary catalog.
• Flexible compensation.
• An equal, diverse company with great Corporate Social Responsibility.
• A positive, healthy, and cooperative work environment. Teamwork is the cornerstone of the company's project successes.

Have you heard of us?

With over 3.800 professionals in 20 corporate offices across Spain, Brussels, Latin America, and Asia, it generates quality employment and helps people grow in technical careers.

Grupo Oesía is a Spanish multinational company dedicated to dual-use digital and industrial engineering, developing and implementing projects worldwide.

At Grupo Oesía we believe in diversity and equal opportunities as drivers of innovation, and in inclusion as the foundation for growth. We foster an environment where everyone, without any distinction, can develop their talent and contribute to building a better future.

Cipherbit-Grupo Oesía is the first Spanish brand specifically dedicated to cybersecurity and the development of secure communication products (encryption), certified by the CCN and NATO.

This division of Grupo Oesía is focused on the national and international environment of Armed Forces, Public Administrations, and critical infrastructures, thereby reinforcing Europe's strategic autonomy in cyber defense.