Interim InfoSec Leader: Secure by Design & Compliance

N-iX; España; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Flexible working format

Remote/office options

Career growth

Education reimbursement

Team events

Not applicable for freelancers

Job summary

N-iX in Spain is seeking an Interim Head of Information Security to shape and lead the client’s security strategy. Reporting to the VP IT & Infrastructure, you will collaborate with Engineering, Legal, and Compliance teams to embed secure-by-design principles and resilient security operations across software development, cloud platforms, and data protection programs.

This 4–6 month assignment can be full-time or part-time.

Qualifications

• 7+ years of Information Security or closely related fields.
• Degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent hands-on experience.
• Experience with software development organizations and cloud-based/SaaS environments.
• Familiarity with PCI-DSS and SOC 2 or similar frameworks.

Responsibilities

• Own and continuously improve the overall security posture with measurable KPIs.
• Define and evolve the information security strategy aligned with business objectives and threat landscape.
• Embed secure-by-design principles into SDLC and platform operations, guiding teams accordingly.
• Translate regulatory and audit requirements into practical, scalable controls.
• Enhance threat detection and incident response through proper logging, monitoring, and alerting.

Skills

Security leadership

Security architecture & SDLC

Cloud/SaaS security

PCI-DSS or SOC 2 familiarity

Threat detection & incident response

Communication & stakeholder mgmt

English fluency

German a plus

Education

Bachelor's degree in Computer Science / IT / Cybersecurity or equivalent

Job description

N-iX in Spain is seeking an Interim Head of Information Security to shape and lead the client’s security strategy. Reporting to the VP IT & Infrastructure, you will collaborate with Engineering, Legal, and Compliance teams to embed secure-by-design principles and resilient security operations across software development, cloud platforms, and data protection programs.

This 4–6 month assignment can be full-time or part-time.