Information Security Manager

JR Spain; Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

A global tourism company is seeking an Information Security Manager to lead the information security program across multiple technology domains. The successful candidate will promote a security-first culture and manage risks efficiently. You will collaborate with stakeholders to embed secure practices, drive policy adoption, and ensure the integrity of critical assets. This role offers attractive remuneration, bonuses, and flexible working options including hybrid or remote models.

Servicios

Attractive remuneration

Bonus opportunity

Exclusive travel perks & discounts

Extensive health & wellbeing support

Formación

• Experience leading an information security capability.
• Good understanding of international regulatory contexts.
• Knowledge of standards and frameworks.

Responsabilidades

• Promote a security-first culture.
• Lead collaboration for secure ways of working.
• Drive adoption of security policies and controls.

Conocimientos

Leadership in information security

Strong communication and influencing skills

Knowledge of cloud technologies

Assessment of maturity and delivering improvements

Commercial acumen

Educación

Certifications like CISSP, CISM, CISA

Herramientas

ISO27001

NIST

PCI

Descripción del empleo

Social network you want to login/join with:

Lisbon, PRT Oporto, PT; Barcelona, ES; Madrid, ES; Flexible, undefined; Remote

Permanent Full Time 37.5 - 40 hours

129822

TUI Group is the world’s number one integrated tourism business. Information Security is a global team within TUI technology responsible for maintaining and continuously improving security across TUI. We are a multi-disciplinary team of experts across Governance, Risk and Compliance (GRC), Architecture, Engineering and Delivery providing services across the UK, Ireland, Sweden, Norway, Denmark, Finland, Spain, Germany, Belgium, and The Netherlands.

We never stop looking ahead, seeking new ways to delight our customers and grow our business. We recognize the power of digital and the massive contribution this brings to creating a truly unique and differentiated customer experience.

We are looking for a talented and dedicated leader to join the Information Security team supporting the information security programme across multiple Technology Domains. As an Information Security Manager within our GRC team, you will play a crucial role in protecting our IT organization.

About Our Offer

• Personal benefits: Attractive remuneration, bonus opportunity, exclusive travel perks & discounts, extensive health & wellbeing support, and more.
• Flexible working: Work is something you do, not somewhere you go. We encourage a healthy work-life balance and offer hybrid or remote working models.
• A career to shape: Opportunities to upskill, reskill, and grow your career. Access the TUI Tech Learning Hub to level-up and reach your ambitions.
• Expand your horizons: Participate in our tech communities and collaborate on global projects and teams.
• Community: Get involved with local charity and sustainability initiatives like the TUI Care Foundation and the Sustainable Tech Community.

About The Job

• Promote a security-first culture within your Domains.
• Contribute to creating, iterating, and maintaining an information security programme to address evolving business risks.
• Lead collaboration with stakeholders to communicate and embed secure ways of working, protecting the brand and its customers.
• Drive adoption of security policies, standards, and controls through expert advice.
• Help protect critical assets and ensure appropriate assurance and testing.
• Track lessons learned from incidents and drive remediation of audit findings.
• Ensure security controls are effective (e.g., vulnerability scanning, patching).
• Protect information and data integrity, availability, authenticity, non-repudiation, and confidentiality.
• Manage risk pragmatically and cost-effectively to maintain stakeholder confidence.
• Report on the effectiveness of the security programme and drive continuous improvement.
• Build strong relationships across business and IT teams, influencing others to protect our Smile.
• Practice secure behaviours in all activities.

About You

• Experience leading an information security capability or ISMS and governance, risk, and compliance activities for a large business unit.
• Strong communication and influencing skills, with ability to gain commitment at board level.
• Experience with Customer and Data security; knowledge of cloud (AWS/GCP) and on-premises technologies is a plus.
• Adept at assessing maturity and delivering improvements.
• Certifications like CISSP, CISM, CISA preferred.
• Good understanding of international regulatory contexts, especially data privacy.
• Knowledge of standards and frameworks such as ISO27001, NIST, PCI, OWASP, ITIL, COBIT.
• Excellent planning, organization, interpersonal, and problem-solving skills.
• Goal-oriented with strong commercial acumen and organizational awareness.