Information Security Engineer

GMV Spain; Tres Cantos; Híbrido; EUR 30.000 - 60.000; Jornada completa

Descripción de la vacante

Una empresa innovadora en el sector de defensa y seguridad busca ingenieros apasionados por la seguridad de la información. En este rol, participarás en la certificación y acreditación de sistemas de información, analizando riesgos y definiendo políticas de seguridad. Con un modelo de trabajo híbrido y un enfoque en el desarrollo profesional, tendrás la oportunidad de crecer en un entorno dinámico. Además, se ofrecen beneficios competitivos, flexibilidad horaria y un compromiso con la diversidad e inclusión. ¡Únete a un equipo que valora tu talento y contribuciones!

Servicios

Modelo de trabajo híbrido

Plan de carrera personalizado

Seguro de salud, dental y accidentes

Frutas y café gratis

Entrenamiento en salud física, mental y financiera

Movilidad nacional e internacional

Paquete de reubicación

Formación

• Experiencia en procesos de certificación y acreditación de sistemas de información.
• Conocimientos en metodologías de análisis de riesgos.

Responsabilidades

• Preparar y apoyar procesos de certificación de sistemas de información.
• Analizar riesgos de seguridad y proponer planes de mitigación.

Conocimientos

Análisis de riesgos de seguridad

Comunicación efectiva

Resolución de problemas

Conocimiento de ISO 27001

Conocimiento de NIST 800-53

Conocimiento de COBIT

Conocimiento de MAGERIT

Conocimiento de ENS y CCN-STIC

Inglés (nivel B2)

Español (nivel B2)

Descripción del empleo

If you are passionate about information security, risk analysis, and compliance, GMV is your place!

We are expanding our teams in the defense and security sector to participate in projects related to information security.

WHAT CHALLENGE WILL YOU BE TAKING ON?

In our defense and security team, you will participate in activities related to the certification and accreditation processes of IT Information and Communication Systems for the management of classified information, performing tasks such as:

1. Preparation and support for the certification and accreditation process of Information and Communications Systems at different levels of National/European classification.
2. Analysis and identification of security risks of Communications Information Systems and proposal of an appropriate mitigation plan.
3. Definition of Information Security Policies and Procedures for the operation of Information and Communications Systems according to the applied security frameworks.
4. Preparation and maintenance of security documentation for Information and Communications Systems.
5. Preparation and analysis of results of Information Security Audits.

WHAT DO WE NEED IN OUR TEAM?

For this position, we are looking for engineers with demonstrable experience and with:

1. Good level of English and Spanish (at least B2).
2. Knowledge of international Information Security (ISO 27001, ISO 22301, NIST 800-53, COBIT).
3. Excellent interpersonal and communication skills to work with people with different IT backgrounds and skills.
4. Strong analytical and problem-solving skills, as well as the ability to work with complex and ambiguous contexts and facilitate strategic decisions.

We also value knowledge in:

1. National Security Scheme (ENS) and CCN-STIC.
2. Knowledge of a Risk Analysis methodology such as MAGERIT, ISRM, EBIOS, or others.

WHAT DO WE OFFER?

1. Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area.
2. Flexible start and finish times, and intensive working hours on Fridays and in summer.
3. Personalized career plan development, training, and language learning support.
4. National and international mobility. Do you come from another country? We can offer you a relocation package.
5. Competitive compensation with ongoing reviews, flexible compensation, and discounts on brands.
6. Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental, and financial health training, and much more!

In our recruitment processes, you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through any other process, please write to our team at [e-mail].

We promote equal opportunities in recruitment, and we are committed to inclusion and diversity.

WHAT ARE YOU WAITING FOR? JOIN US

If you have any questions, please do not hesitate to contact Clara Sanchez Lobato, in charge of this vacancy.