Regional Information Security Officer (RISO) - ES

Konsento; Madrid; Presencial; EUR 65.000 - 90.000; Jornada completa

Descripción de la vacante

Konsento is seeking a Regional Information Security Officer (RISO) to manage the implementation of IT risk management and cybersecurity strategy across Madrid. The ideal candidate will lead regional programs, manage budgets, and ensure security standards aligned with group policies.

The role requires 7 to 10 years of relevant experience, including leadership in cybersecurity. Certifications such as CISM or CISSP are preferred, and candidates must possess exceptional communication skills.

Formación

• 7 to 10 years of relevant experience, including 5 years in a leadership role.
• CISM or CISSP certification preferred.
• Knowledge of ITIL and information security management frameworks.

Responsabilidades

• Manage security control weaknesses and report cybersecurity risks.
• Grow and run the regional information security program.
• Proactively collaborate with business units to implement audits and tools.

Conocimientos

Leadership

Cybersecurity

Risk Management

ITIL knowledge

Communication skills

Educación

Certified Information Security Manager (CISM)

Certified Information Systems Security Professional (CISSP)

Herramientas

ISO 27001

COBIT

Descripción del empleo

Regional Information Security Officer (RISO) - ES

Job type: Full-time

Konsento is searching a talented candidate for our client, a global life‑science company with 50,000 employees in 47 countries.

The Regional Information Security Officer will lead the implementation and operation of IT risk management and cybersecurity strategy across the region.

Responsibilities

• Manage security control weaknesses and report cybersecurity risks, supporting business goals.
• Grow and run the regional information security program.
• Proactively collaborate with business units to implement audits, measures, and tools that meet global standards.
• Provide security oversight over the regional infrastructure delivery team(s), embedding security in operations and new initiatives.
• Lead the information security function across the region to ensure consistent, high‑quality management aligned with Group Security Standards.
• Collaborate with the Group Information Security team to apply group standards, drive regional action plans, and coordinate initiatives.
• Manage the regional information security budget in collaboration with the regional business sponsor and Group Information Security.
• Act as hiring manager for the team, ensuring senior business leadership buy‑in for team composition and sizing.
• Perform information security risk assessments, including reporting and oversight of treatment efforts for negative findings.
• Embed security in the project delivery process by providing appropriate policies, practices, guidelines, and oversight.

Qualifications

• 7 to 10 years of relevant experience, including 5 years in a leadership role.
• Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) certification preferred.
• Knowledge of ITIL and information security management frameworks, such as ISO 27001, ITIL, and COBIT. ITIL certification preferred.
• Experience establishing cybersecurity and risk metrics.
• Excellent written and verbal English communication skills.