Information Security Manager

Sovendus; España; A distancia; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

Sovendus, a Europe-wide player in connecting brands with customers, is seeking an Information Security Manager based in Spain to own security initiatives and strengthen partner trust. You will manage ISMS, vulnerability programs, and cloud security practices, coordinating with engineering and IT to ensure secure designs and compliant operations.

You will drive security governance, engage with stakeholders, and shape the security roadmap in a fast-growing international environment, with a focus

Formación

• 5+ years of experience in Information Security.
• Solid understanding of AWS and cloud security best practices.
• Experience managing vulnerability management processes and coordination of remediation.
• Familiarity with ISMS frameworks; ISO 27001 and SOC 2 involvement is a plus.
• Good understanding of GDPR and data protection concepts.

Responsabilidades

• Maintain and enhance the ISMS and security documentation to build trust with partners and customers.
• Manage partner security assessments and questionnaires with reusable documentation.
• Lead the vulnerability management lifecycle and coordinate remediation across teams.
• Review AWS environment and advise on IAM, logging, encryption, network security, and secure architectures.
• Act as security contact for Engineering and Corporate IT, supporting secure design and threat modeling.
• Coordinate penetration tests with external partners and contribute to GDPR compliance and certification readiness.
• Shape security processes and drive initiatives to own Sovendus' security roadmap.

Conocimientos

Information security governance

Security architecture

Vulnerability management

GDPR compliance

Stakeholder communication

Autonomous work

English proficiency

Herramientas

IAM tooling

Security monitoring tools

Encryption tooling

Security questionnaires tooling

Descripción del empleo

Sovendus connects Europe’s leading brands with customers who buy.

We’ve been doing it for 17 years, with one clear focus: turning general checkout traffic into a source of new customers and incremental revenue.

More than 3,000 brands across Europe are already growing with Sovendus through long-term partnerships and real European transaction data. That’s how growth becomes predictable. And scalable.

Now, we're looking for an Information Security Manager based in Spain who wants to take ownership of security initiatives, strengthen trust with our partners, and help shape the future of security and compliance at Sovendus.

As an Information Security Manager, you will:

• Maintain and enhance our security documentation and Information Security Management System (ISMS), helping build a strong trust framework for partners and customers.
• Manage partner security assessments and questionnaires, creating reusable documentation and standardized responses.
• Drive the vulnerability management lifecycle, coordinating remediation efforts and security reporting across teams.
• Review our AWS environment, identify security improvement opportunities, and advise on cloud security best practices, including IAM, logging, network security, and encryption.
• Act as the go-to security contact for Engineering and Corporate IT, supporting secure design, threat modeling, identity management, endpoint security, and SaaS security.
• Coordinate penetration tests with our external security partners, support GDPR and data protection initiatives, and contribute to future ISO 27001 and/or SOC 2 certification readiness.
• As this is a newly created role, you will have the opportunity to shape security processes, drive initiatives, and take ownership of our security roadmap.

Your profile:

• You have 5+ years of experience in Information Security, combining technical security expertise with security governance, risk management, and security frameworks.
• You bring a solid understanding of AWS and cloud security best practices and are comfortable working with engineering teams on topics such as IAM, logging, encryption, network security, and secure architectures.
• You have experience managing vulnerability management processes, coordinating remediation activities, and working with security tooling.
• You are familiar with ISMS frameworks and security standards, ideally including hands‑on involvement in ISO 27001 and/or SOC 2 initiatives.
• You have a good understanding of GDPR and data protection concepts, with experience supporting security documentation, partner assessments, and security‑related compliance requirements.
• You are confident engaging with both technical and non-technical stakeholders and translating security requirements into practical actions.
• You enjoy working autonomously, taking ownership of initiatives, and building processes in evolving environments.
• You are structured, self‑organized, and comfortable driving cross‑functional initiatives in an international environment, with business‑fluent English.

It's a plus if you have:

• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or AWS Security Specialty.
• Experience with security questionnaires, audits, customer due diligence processes, or partner assessments.
• A background in Software Development, DevOps, Platform Engineering, or Corporate IT Security.
• Familiarity with identity, access, endpoint, and cloud security solutions.
• Experience supporting or leading ISO 27001, SOC 2, or similar certification initiatives.

Because trust matters.

You’ll be part of an international, fast-growing company that values ownership, collaboration, and continuous improvement. Your work will play a key role in strengthening our security posture, building trust with customers and partners, and supporting the sustainable growth of our business across Europe.

**Please note: This is a remote role, but we are only considering candidates who are already based in Spain and have valid work authorization**