Head of Information Security

Ersilia; Madrid; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health & wellness

Holiday entitlement

Remote work flexibility

Learning & development

Culture & impact

Descripción de la vacante

Infront in Madrid is seeking an experienced Head of Information Security to strengthen the company’s security posture. This hands-on leadership role will guide 2–3 Information Security Engineers and drive practical improvements across the organisation.

You will own ISO 27001 implementation, lead audits and risk management, partner with engineering to embed security into software delivery, and report KPIs to senior management.

Formación

• 6+ years in cybersecurity with leadership experience
• Hands-on ISO 27001 implementation
• Strong risk management and incident handling
• Experience with cloud security (AWS/Azure/GCP) and GDPR

Responsabilidades

• Lead ISO 27001 programme across the organisation
• Monitor and improve security posture; manage audits and penetration testing
• Partner with engineering to embed security in software delivery
• Provide regular security KPI reports to senior management
• Oversee budget and vendor relationships while guiding the security team

Conocimientos

Leadership

Information security

Cloud security

Risk management

ISO 27001

GDPR knowledge

English fluency

Educación

Technical degree in CS or related field

Descripción del empleo

About our client

At Infront, we are committed to fostering an inclusive workplace, recognizing our diverse team as one of our most valuable assets.

For 25 years, Infront has been empowering financial market experts to make faster, smarter, compliant decisions. Over time, we have expanded our foundation by bringing together companies with more than 75 years of combined market experience and trust. All these years on, we're still building. Opening our new Madrid office this summer marks an exciting next chapter, and we're growing our team in order to write it.

Our strength lies in market data, delivering reliable, accurate information through a powerful suite of tools, spanning Data Intelligence, Wealth Management solutions, and Trading & Investor solutions, that our users depend on every day. Today, we are one of Europe’s leading providers of market data and financial software, helping professionals navigate markets with confidence and speed.

About the Role

We’re seeking an experienced Head of Information Security to strengthen and improve the company’s security posture; this is a hands‑on leadership role suited to someone who enjoys rolling up their sleeves, solving problems, and directly implementing improvements, rather than focusing primarily on high‑level strategy. You will act as a pragmatic security leader who actively contributes to day‑to‑day security operations and initiatives, while also line managing 2–3 Information Security Engineers, providing guidance, support, and technical direction to drive practical security outcomes across the organisation.

Responsibilities

• Lead a major ISO 27001 compliance programme across the organisation
• Monitor and continuously improve the organisation’s security posture
• Develop, maintain, and update information security policies in line with industry standards, ensuring company‑wide compliance
• Partner closely with engineering teams to embed security into software development processes
• Ensure compliance with relevant financial services regulations and standards
• Manage security audits and penetration testing activities
• Implement staff training initiatives to increase security awareness (e.g. phishing, access control)
• Hire team members and select external vendors as appropriate
• Operate within budget constraints, leveraging open‑source solutions where beneficial
• Manage security incidents effectively, with the ability to respond quickly under pressure
• Provide regular reporting on security status and KPIs to senior management

Who you are

Requirements

• 6+ years of professional experience in cybersecurity, with at least 2 years of team leadership experience
• Technical background in computer science, software development, or a related field
• Proven track record of improving cybersecurity in companies with 100–1000 employees
• Hands‑on experience implementing ISO 27001
• Expertise in risk management, including threat analysis and risk acceptance vs. mitigation
• Familiarity with security controls in at least one major cloud platform (AWS, Azure, or GCP)
• Strong analytical and problem‑solving skills, including root cause analysis and sound build‑vs‑buy decision‑making
• Good understanding of GDPR regulations
• Solid project and change management skills, with a track record of delivering initiatives to completion
• Strong leadership skills, including for teams you do not directly manage
• Strong communication, presentation, and stakeholder management skills, with the ability to influence without formal authority
• Fluent in written and spoken English

Nice to have, experience with

• DORA regulation
• NIST Cyber security framework
• Cyber Resiliance Act

Our offer

• Health & wellness: Benefit from wellbeing initiatives tailored to local needs, including access to an employee assistance programme that provides confidential support to employees and their families.
• Holiday: Enjoy competitive holiday entitlement aligned with local markets, so you can rest and recharge.
• Remote work: Enjoy the opportunity to work two days a week from home, with flexible working hours where possible. You may also request to work up to four weeks per year from a different location.
• Learning & development: Support your career progression with access to learning resources, ongoing conversations with your manager, and opportunities to share the knowledge you gain with your team.
• Culture & impact: Be part of an international team with a startup mindset and play a key role in making a meaningful impact.

Our offices: Work from Europe’s leading financial centres and be at the heart of where finance happens.

Additional notes

All candidates selected for employment are subject to Pre‑Employment Screening. This process includes professional reference and background checks conducted by our third‑party partner, ZINC. These screenings are part of our commitment to ensuring a secure, compliant, and trustworthy workplace.

This position will be based in our new office in Madrid; however, we also welcome applications from candidates located in London or Oslo who have the legal right to work in their respective location.

We kindly ask that you submit your CV in English.