ES Head of IT Assurance & CISO

NN Group; Madrid; On-site; EUR 180,000 - 240,000; Full time

Job summary

Nationale-Nederlanden (NN Group) is seeking a Head of IT Assurance to lead the strategy for IT Security and IT Service Management. You will drive governance, risk, and resilience across a complex IT landscape, balancing business priorities with technology risk.

You will lead IT Assurance and ITSM teams, ensuring secure services, effective incident management and strategic technology investments. Strong leadership and regulatory acumen are essential.

Qualifications

• Bachelor’s or Master’s degree in CS/IT or related field.
• Relevant professional certifications such as CISSP, CISM, ITIL or CISA.
• Proven senior leadership experience in complex IT environments.
• Broad expertise across Information Security, IT Risk and IT Service Management.

Responsibilities

• Define and drive the strategy and roadmap for IT Security and ITSM, aligned with business priorities.
• Lead the IT Assurance and ITSM Managers, promoting collaboration across IT and business.
• Ensure secure, resilient IT services meeting business needs and SLAs.
• Govern information security, IT risk and compliance within risk appetite and regulatory requirements.
• Oversee performance and resilience of critical IT services and incident management.
• Embed security and resilience principles across technology initiatives and change programs.
• Provide senior leadership with clear insights into IT security and risks for decision-making.
• Oversee resources, budgets and technology partners to deliver business value.

Skills

Senior leadership

Stakeholder management

IT governance

Cybersecurity

Operational resilience

Risk management

Budget management

Vendor management

Education

CS/IT degree

CISSP

CISM

ITIL

CISA

Masters preferred

Job description

Would you like to lead information security and IT assurance in a role with strategic impact?

As Head of IT Assurance, you will have a significant impact on the organization by ensuring that technology services are secure, resilient, compliant and aligned with business priorities.

You will lead the strategic direction of Information Security and IT Service Management, ensuring that our technology environment is secure, resilient, compliant and reliable.

You will help the organization balance business needs, operational stability and technology risks, contributing to strategic decisions and strengthening our cyber resilience, service continuity and risk management.

Through your leadership, you will foster a culture of security, accountability, continuous improvement and service excellence across IT and wider organization.

What you will do

• Define and drive the strategy and roadmap for IT Security and IT Service Management, ensuring alignment with business and technology priorities.
• Lead and empower the IT Assurance and ITSM Managers, setting clear priorities and promoting strong collaboration within their teams and across IT and the wider business.
• Ensure secure, resilient and reliable IT services, meeting business needs, customer expectations and agreed service levels.
• Provide overall governance of information security, IT risk and compliance, ensuring risks are effectively managed within the company’s risk appetite and in line with regulatory, Group and internal requirements.
• Oversee the performance and resilience of critical IT services, ensuring effective management of major incidents, vulnerabilities, service disruptions and remediation actions.
• Embed security, resilience and service management principles across technology initiatives and business change, contributing to sound and risk-based technology decisions.
• Provide senior leadership with clear insight into IT security, service performance and key technology risks, translating complex topics into business impact and supporting informed decision-making.
• Oversee resources, investments and strategic technology partners, ensuring effective allocation of resources, appropriate third-party management and delivery of business value

What you bring

• Proven senior leadership experience in complex IT environments, with the ability to set strategic direction, drive transformation and balance business priorities, technology opportunities and risk.
• Strong people leadership skills, with experience leading managers and multidisciplinary teams, developing talent and creating alignment, accountability and collaboration across different areas.
• Strong stakeholder management and influencing skills, with the ability to build trusted relationships with senior leaders, business and technology teams, Group functions, regulators, auditors and external partners.
• Broad expertise across Information Security, IT Risk and IT Service Management, with a solid understanding of cybersecurity, operational resilience, IT governance, critical IT services and relevant regulatory and control frameworks.
• Sound judgement and decision-making capabilities, with the ability to navigate complex situations, balance risk with business needs and translate technical topics into clear business implications and actionable recommendations.
• Experience managing strategic partners, budgets and technology investments, ensuring resources and investments are aligned with business priorities and deliver value.
• A pragmatic, collaborative and improvement-oriented mindset, with the ability to drive simplification, automation and continuous improvement while maintaining high standards of integrity and accountability.

Education and certifications:

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Information Systems, Telecommunications, Cybersecurity or a related field.
• Relevant professional certifications would be highly valued, including CISSP or CISM, ITIL, CISA or equivalent IT risk and assurance certification

In Nationale-Nederlanden we are committed with diversity. We are proud to be an inclusive organization and we offer equal opportunities, regardless of race, cultural background, gender, gender identity, religion, national origin, age, disability, marital status, and sexual orientation. One of our core values is taking care of our employees so they can give their best within a respectful environment.