Global IT Security Engineer — ISO/NIS2/TISAX Focus

Estamp Int; Barcelona; Híbrido; EUR 60.000 - 100.000; Jornada completa

Descripción de la vacante

Estamp Int is seeking a cybersecurity leader to safeguard its IT and OT environments. You will implement and enforce security policies, manage third‑party risks, and drive security awareness across the group.

Travel to international plants may be required to coordinate security efforts and ensure compliance with ISO 27001, NIS2, and TISAX. The role combines technical depth with operational responsibility to protect information assets and continuously improve security posture in a dynamic

Formación

• Mandatory: degree in IT/Cybersecurity or related field.
• Knowledge of firewalls, EDR/XDR, SIEM and vulnerability tools.
• Understanding of ISO 27001, NIS2, TISAX or equivalent.
• Preferred: 2 years in cybersecurity and IT/OT environments.
• Experience managing external partners and coordinating security activities.

Responsabilidades

• Manage IT security policies, standards, and procedures aligned with regulatory requirements.
• Provide IT security across the group and assist international plants through travel.
• Oversee third-party risk management (SOC, MSSP, auditors, vendors).
• Lead security awareness initiatives and training programs.
• Design and maintain security controls across infrastructure, networks, endpoints and cloud.

Conocimientos

Cybersecurity basics

IT security policies

Security awareness training

Educación

Bachelor's or Master's in IT/Cybersecurity/Computer Engineering

Herramientas

Firewalls

EDR/XDR

SIEM

Vulnerability tools

Cloud security

Network security

Descripción del empleo

Estamp Int is seeking a cybersecurity leader to safeguard its IT and OT environments. You will implement and enforce security policies, manage third‑party risks, and drive security awareness across the group.

Travel to international plants may be required to coordinate security efforts and ensure compliance with ISO 27001, NIS2, and TISAX. The role combines technical depth with operational responsibility to protect information assets and continuously improve security posture in a dynamic