Head of Information Security

workfully; Madrid; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health & wellbeing program

Hybrid work options

Learning & development

International team

Descripción de la vacante

Infront is expanding its Madrid office and seeks a seasoned cybersecurity leader to drive an ISO 27001 program, strengthen the security posture, and align policies with industry standards.

You will partner with engineering to embed security into software development, manage audits and training, and mentor a growing security team while ensuring regulatory compliance across GDPR and financial services rules.

Formación

• 6+ years in cybersecurity with at least 2 years in team leadership.
• Technical background in computer science, software development, or related field.
• Proven track record improving cybersecurity in companies with 100–1000 employees.
• Hands-on ISO 27001 implementation.
• Experience with cloud security controls in AWS/Azure/GCP.
• Strong analytical and problem‑solving skills.
• Knowledge of GDPR regulations.
• Strong leadership and stakeholder management.
• Fluent in written and spoken English.

Responsabilidades

• Lead ISO 27001 compliance programme across the organisation.
• Monitor and continuously improve the organisation’s security posture.
• Develop, maintain, and update information security policies in line with industry standards, ensuring company-wide compliance.
• Partner closely with engineering teams to embed security into software development processes.
• Ensure compliance with relevant financial services regulations and standards.
• Manage security audits and penetration testing activities.
• Implement staff training initiatives to increase security awareness.
• Hire team members and select external vendors as appropriate.
• Operate within budget constraints, leveraging open-source solutions where beneficial.
• Manage security incidents effectively, with the ability to respond quickly under pressure.
• Provide regular reporting on security status and KPIs to senior management.

Conocimientos

Cybersecurity leadership

ISO 27001

Risk management

Cloud security

Stakeholder management

English fluency

Educación

Computer science degree

Herramientas

AWS

Azure

GCP

Descripción del empleo

About our client

Company: Infront

About The Role

At Infront, we are committed to fostering an inclusive workplace, recognizing our diverse team as one of our most valuable assets.
For 25 years, Infront has been empowering financial market experts to make faster, smarter, compliant decisions. Over time, we have expanded our foundation by bringing together companies with more than 75 years of combined market experience and trust. All these years on, we’re still building. Opening our new Madrid office this summer marks an exciting next chapter, and we’re growing our team in order to write it.
Our strength lies in market data, delivering reliable, accurate information through a powerful suite of tools, spanning Data Intelligence, Wealth Management solutions, and Trading & Investor solutions, that our users depend on every day. Today, we are one of Europe’s leading providers of market data and financial software, helping professionals navigate markets with confidence and speed.

Responsibilities

• Lead a major ISO 27001 compliance programme across the organisation
• Monitor and continuously improve the organisation’s security posture
• Develop, maintain, and update information security policies in line with industry standards, ensuring company-wide compliance
• Partner closely with engineering teams to embed security into software development processes
• Ensure compliance with relevant financial services regulations and standards
• Manage security audits and penetration testing activities
• Implement staff training initiatives to increase security awareness (e.g. phishing, access control)
• Hire team members and select external vendors as appropriate
• Operate within budget constraints, leveraging open-source solutions where beneficial
• Manage security incidents effectively, with the ability to respond quickly under pressure
• Provide regular reporting on security status and KPIs to senior management

Requirements

• 6+ years of professional experience in cybersecurity, with at least 2 years of team leadership experience
• Technical background in computer science, software development, or a related field
• Proven track record of improving cybersecurity in companies with 100–1000 employees
• Hands‑on experience implementing ISO 27001
• Expertise in risk management, including threat analysis and risk acceptance vs. mitigation
• Familiarity with security controls in at least one major cloud platform (AWS, Azure, or GCP)
• Strong analytical and problem‑solving skills, including root cause analysis and sound build‑vs‑buy decision‑making
• Good understanding of GDPR regulations
• Solid project and change management skills, with a track record of delivering initiatives to completion
• Strong leadership skills, including for teams you do not directly manage
• Strong communication, presentation, and stakeholder management skills, with the ability to influence without formal authority
• Fluent in written and spoken English

Nice To Have, Experience With

• DORA regulation
• NIST Cyber security framework
• Cyber Resiliance Act

Our offer

Health & wellness: Benefit from wellbeing initiatives tailored to local needs, including access to an employee assistance programme that provides confidential support to employees and their families.

Holiday: Enjoy competitive holiday entitlement aligned with local markets, so you can rest and recharge.

Remote work: Enjoy the opportunity to work two days a week from home, with flexible working hours where possible. You may also request to work up to four weeks per year from a different location.

Learning & development: Support your career progression with access to learning resources, ongoing conversations with your manager, and opportunities to share the knowledge you gain with your team.

Culture & impact: Be part of an international team with a startup mindset and play a key role in making a meaningful impact.

Our offices: Work from Europe’s leading financial centres and be at the heart of where finance happens.

Additional Notes

All candidates selected for employment are subject to Pre-Employment Screening. This process includes professional reference and background checks conducted by our third‑party partner, ZINC. These screenings are part of our commitment to ensuring a secure, compliant, and trustworthy workplace.

This position will be based in our new office in Madrid; however, we also welcome applications from candidates located in London or Oslo who have the legal right to work in their respective location.

Interview process

• Shortlisted
• 1st stage
• Offer sent