Lead Information Security – Build & Own Board Security

Luminary; Valencia; Vor Ort; EUR 70.000 - 100.000; Vollzeit

Zusammenfassung

Luminary is seeking an Information Security Officer to own the security function, set priorities, manage risk, and verify controls with direct access to the Board. You will shape the security framework and report on security posture at the leadership level.

Based in Valencia, you will oversee external security providers, drive audits for GDPR, PCI DSS, ISO 27001, and ensure compliance across the organization while partnering with senior management to align security with business goals.

Qualifikationen

• Experience building or leading an information security function from the ground up.
• Strong grounding in governance, risk, access management, monitoring, and incident response.
• Technical ability to independently assess controls, configurations, and logging coverage.
• Experience managing security vendors and participating in audits or supervisory reviews.
• Strong communication skills for senior management and Board reporting.
• Working knowledge of DORA, PCI DSS, GDPR, and ISO/IEC 27001.
• 5+ years in information security, including 3+ years in a regulated financial organisation.
• Nice to have MSSPs experience and EMI/PSP/FinTech exposure; ISO 27001 lead auditor a plus.

Aufgaben

• Governance Risk - Build and maintain the security framework, risk register, and roadmap - Report risks to the Board
• Controls Access - Set security requirements - Verify controls - Run recurring access reviews (MFA, PAM, logging, monitoring)
• Monitoring Incident Response - Run security monitoring (incl. MSSPs) - Maintain incident response runbooks - Lead investigations
• Vendor Third-Party - Select, assess, and oversee security vendors and third-party risk
• Testing Remediation - Prioritize findings from penetration tests and remediation
• Regulatory Audit Support DORA, PCI DSS, GDPR, and ISO 27001 compliance Own audits and regulatory reviews.

Kenntnisse

InfoSec leadership

Governance & risk

Access management

Monitoring & IR

Vendor management

Audit & regulatory

Board reporting

Security standards

Jobbeschreibung

Luminary is seeking an Information Security Officer to own the security function, set priorities, manage risk, and verify controls with direct access to the Board. You will shape the security framework and report on security posture at the leadership level.

Based in Valencia, you will oversee external security providers, drive audits for GDPR, PCI DSS, ISO 27001, and ensure compliance across the organization while partnering with senior management to align security with business goals.