Interim Head of Information Security - Remote/Hybrid

Jobgether; España; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working

Hybrid options

Professional development

Mentorship

Education reimbursement

Descripción de la vacante

Jobgether seeks an Interim Head of Information Security based in Spain to own the security strategy for a software-driven organization. You will partner with Engineering, IT, Legal and Compliance to embed security into development and platform operations, aiming for secure-by-design practices and measurable risk management.

This 4–6 month engagement includes preparing for PCI-DSS and SOC 2 audits, strengthening threat detection, and guiding a small security team.

Formación

• 7+ years in Information Security or Security Engineering.
• Experience with software development environments and cloud-based SaaS.
• Familiarity with PCI-DSS and SOC 2 compliance.

Responsabilidades

• Own and improve the organization’s information security posture with KPIs.
• Define and evolve information security strategy aligned with business priorities.
• Partner with Engineering to embed security in the SDLC and operations.
• Establish pragmatic security standards and guardrails for teams.
• Prepare for regulatory/audit requirements like PCI-DSS and SOC 2.
• Strengthen threat detection via logging, monitoring and alerts.
• Evaluate security technologies for fit and build-versus-buy decisions.
• Advise stakeholders and represent security in discussions with customers and auditors.
• Lead and develop a small security team.

Conocimientos

InfoSec

Security Engineering

Cloud/SaaS

Threat Detection

Logging & Monitoring

Architecture & Security

Stakeholder Management

Communication Skills

Engineering Collaboration

Team Leadership

Educación

CS/IT/Cybersecurity degree

Herramientas

PCI-DSS

SOC 2

Descripción del empleo

Jobgether seeks an Interim Head of Information Security based in Spain to own the security strategy for a software-driven organization. You will partner with Engineering, IT, Legal and Compliance to embed security into development and platform operations, aiming for secure-by-design practices and measurable risk management.

This 4–6 month engagement includes preparing for PCI-DSS and SOC 2 audits, strengthening threat detection, and guiding a small security team.