Global Head of Information Security & GRC

Allfunds Bank SAU; Madrid; On-site; EUR 90,000 - 120,000; Full time

Job summary

Allfunds Bank SAU is seeking a seasoned Information Security professional to lead the ISMS and cybersecurity governance across the organization in Madrid. The role focuses on maintaining policies, standards, and regulatory alignment while managing cyber risk in a complex, international environment.

You will drive the Cybersecurity Strategic Plan, coordinate audits and third-party risk assessments, and coordinate security awareness across the business.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, Risk Management or related field.
• Minimum 7 years of experience in Information Security, Cybersecurity GRC, Technology Risk, Audit or Regulatory Compliance, preferably in financial services or another regulated industry.
• Strong knowledge of ISO 27001, NIST CSF, DORA, GDPR and ENS, with experience in risk management, audit and third-party risk management.
• Certifications such as ISO 27001 Lead Auditor/Implementer, CISM, CISSP, CRISC or CISA are valued.

Responsibilities

• Lead and continuously improve the Information Security Management System (ISMS) and cybersecurity governance.
• Maintain information security policies, standards and procedures with proper governance and controls.
• Define and monitor the Cybersecurity Strategic Plan aligned with regulatory requirements and risk landscape.
• Lead identification, assessment, treatment, acceptance and monitoring of information security and cyber risks.
• Ensure cybersecurity risk assessments for systems, processes, changes, third parties and outsourcing.

Skills

Cybersecurity governance

Regulatory compliance

Risk management

Audit & controls

ISO 27001

NIST CSF

Stakeholder management

English proficiency

Spanish proficiency

Leadership

Education

Bachelor's or Master's degree in Cybersecurity or related field

Job description

Allfunds Bank SAU is seeking a seasoned Information Security professional to lead the ISMS and cybersecurity governance across the organization in Madrid. The role focuses on maintaining policies, standards, and regulatory alignment while managing cyber risk in a complex, international environment.

You will drive the Cybersecurity Strategic Plan, coordinate audits and third-party risk assessments, and coordinate security awareness across the business.