Information Security Lead

Loyal Guru; Barcelona; Híbrido; EUR 40.000 - 80.000; Jornada completa

Descripción de la vacante

An established industry player is seeking an Information Security & Compliance Specialist to lead efforts in maintaining security standards and compliance. This role involves managing ISO 27001 certification, ensuring GDPR compliance, and applying frameworks like ENS or SOC 2 to enhance security measures. You'll collaborate with diverse teams to implement secure solutions and communicate policies effectively. The company values flexibility, offering hybrid work options and generous benefits, including health insurance discounts and ample vacation time. Join a forward-thinking team committed to safeguarding data integrity and fostering a secure environment.

Servicios

50% discount on private health insurance

Access to wellbeing benefits with Wellhub

Discounts on gyms and fitness activities

Flexible schedules

Reduced working hours on Fridays

25 days of paid vacation

Birthday off

Formación

• 5+ years of experience in information security, compliance, or auditing.
• Hands-on experience maintaining ISO 27001 certification.
• Strong knowledge of GDPR in tech environments.

Responsabilidades

• Maintain and evolve ISO 27001 certification from documentation to audits.
• Lead cross-functional projects collaborating with tech and business teams.
• Draft and communicate policies and procedures clearly.

Conocimientos

Information Security

Compliance

ISO 27001

GDPR

Risk Management

Project Leadership

Communication

Educación

CISSP Certification

CISM Certification

ISO 27001 Lead Implementer/Auditor

Herramientas

GCP

Descripción del empleo

Hi there!

At Loyal Guru, we're looking for an Information Security & Compliance Specialist who’s ready to take the lead in keeping our systems secure and compliant.

What will you do in this role?

You'll play a key role in our security and compliance roadmap, ensuring we meet the highest standards as we scale.

Maintain and evolve our ISO 27001 certification — from documentation to audits, you’ve got it covered.

Apply your GDPR expertise to ensure our systems, processes, and data flows are always compliant.

Bring your knowledge of ENS or SOC 2 frameworks (ideally both!) to strengthen our approach to risk and security.

Lead cross-functional projects, collaborating with tech and business teams to drive secure and compliant solutions.

Draft, review, and communicate policies and procedures in a clear, actionable way. You’ll be the go-to person when it comes to aligning security with business operations.

What are we looking for?

Must-haves:

• 5+ years of experience in information security, compliance, or auditing.
• Hands-on experience maintaining an ISO 27001 certification.
• Strong knowledge of GDPR and how to apply it in tech environments.
• Experience with ENS or SOC 2 (ideally both).
• Ability to lead cross-functional projects and collaborate with technical and business teams.
• Excellent communication skills and experience drafting policies and procedures.

Nice-to-haves:

• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or DPO.
• Experience in B2B SaaS environments or companies managing sensitive data.
• Knowledge of cloud platforms (especially GCP).

What benefits do we offer?

We care about you:

• 50% discount on private health insurance
• Access to wellbeing benefits with Wellhub
• Discounts on gyms and fitness activities
• Save more with Cobee
• Emotional security benefits with BH Bienestar to support your mental wellbeing

Flexibility for your daily life:

• Flexible schedules
• Reduced working hours on Fridays and in August
• Hybrid or full remote work options

Time for yourself:

• 25 days of paid vacation
• Birthday off: A paid day off to celebrate YOU