Information Security Manager

Ciklum; Málaga; Presencial; EUR 65.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Education path and certifications

Career growth opportunities

Flexible schedule

Descripción de la vacante

Ciklum is seeking an Information Security Manager to join our team in Spain. You will lead information security across a large business unit, collaborating with stakeholders to embed secure ways of working and protect client brands.

The role focuses on security strategy, policy adherence, incident management, and improving defences across AWS Cloud and on-prem environments. A hybrid work setup is offered in Málaga.

Formación

• Experience leading information security for a large business unit.
• Familiarity with security in Agile development and AWS.
• Experience in security operations and incident management in Cloud/OnPrem.

Responsabilidades

• Develop and drive an information security strategy to address business risk and roadmap.
• Lead security policy adoption, standards, and controls with expert guidance.
• Ensure effective security incident management and remediation of findings.

Conocimientos

Security leadership

AWS security

Security operations

Stakeholder communication

Problem solving

Educación

ISO27001 Lead Implementer

COMPTIA Security+

CISSP/CISM/CISA

Herramientas

AWS

Descripción del empleo

Job Description

Ciklum is looking for a Information Security Manager to join our team in Spain.

We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.

About The Role

As a Information Security Manager, you'll become a part of a cross-functional development team engineering experiences of tomorrow.

Responsibilities

• You will contribute to the delivery of an information security strategy to address the evolving business risk and empower the Domain to deliver the prioritised roadmap. You will lead the collaboration with stakeholders to communicate and embed secure ways of working with regular cadence and engagement. This will include protecting the client's brand and its customers, detecting and responding to incidents, strengthening our defences, reducing the attack surface, proactively highlighting risks to the business and promoting security awareness as second nature


• You will drive adoption of and adherence to security policies, standards, and controls through the provision of expert advice and guidance. Protect our most critical assets and ensure appropriate assurance and rigorous testing is in place


• You will ensure local security incidents are managed effectively, and that lessons learned, and audit findings are remediated. You will have come from a technical background and having good knowledge of security in AWS Cloud environments having held a technical role. Ensure effective security operations (e.g. vulnerability scanning, patching)


• Protect the integrity, availability, authenticity, non-repudiation and confidentiality of information and data in storage and in transit


• Manage risk in a pragmatic and cost-effective manner to ensure stakeholder confidence


• You will report on the overall effectiveness of the security programme on the Domain against defined key performance indicators and drive continuous improvement


• Our information security team works in collaboration with business and IT teams across our many businesses


• You will build strong working relationships influence others to do the right thing to Protect our Smile


• Security is part of everyone’s job. We practice secure behaviors first in everything we do

Requirements

• Demonstrable experience of leading and information security capability for a large business unit


• Good understanding of security within agile development processes, and in Amazon Web Services


• Adept understanding of security operations and security incident management in Cloud and OnPrem environments


• Good experience in implementing ISMS in a large organisation


• AWS Cloud Fundamental or Practitioner certification preferable


• ISO27001 Lead Implementer, COMPTIA Security+, CISMP/CISSP/CISM/CISA certified preferred


• Good understanding of the international regulatory context, particularly data privacy


• Good understanding of standards and frameworks such as ISO, NIST, PCIDSS, OWASP and ITIL


• Excellent planning and organisation skills to determine effective course of action


• Strong communication skills. Experienced at gaining commitment from stakeholders to reach broader goal to reduce information security risks


• Excellent interpersonal and relationship skills to work with technical and non-technical colleagues around the world


• Goal orientated to maintain focus on agreed Information Security objectives and deliverables


• Problem solving skills to identify creative and elegant solutions to support Information Security GRC activities and overall objectives


• A logical thinker, and a team player with ability to think positively in a problem situation


• Strong commercial acumen when making proposals, taking actions or help support decision making


• Good organisational structure awareness. Able to identify the decision makers and influencers


• Ability to understand the needs, objectives, and constraints of those in other teams

What’s in it for you?

• Care: your mental and physical health is our priority. We ensure comprehensive company-paid medical insurance and 4 additional undocumented sick leave day


• Tailored education path: boost your skills and knowledge with our regular internal events (meetups, conferences, workshops), Udemy license, language courses and company-paid certification


• Growth environment: share your experience and level up your expertise with a community of skilled professionals, locally and globall


• Flexibility: Own your schedule – you are the one to decide when to start your working day. Just don’t miss your regular team stand-up. We are there to support your work-life balance and provide 23 vacation days


• Opportunities: we value our specialists and always find the best options for them. Our Internal Mobility Program helps change a project if needed to help you grow, excel professionally and fulfill your potential


• Global impact: work on large-scale projects that redefine industries with international and fast-growing clients


• Welcoming environment: feel empowered with a friendly team, open-door policy, informal atmosphere within the company and regular team-building events

About Us

At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress.

Based in Málaga, our team thrives in one of Andalusia’s leading tech hubs. Enjoy a hybrid work setup, the sunny Mediterranean vibe, and endless opportunities to grow your skills on global-scale projects.