Remote Information Security Manager — AWS, ISO 27001, SOC 2

Sovendus GmbH; Barcelona; Remote; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Remote work

Workation

External training

30 Days of Annual Leave

Job summary

Sovendus GmbH is seeking an Information Security Manager to strengthen our security program in a remote, Spain-based role. You will coordinate governance, risk and compliance activities while guiding developers and Corporate IT on secure design and cloud security best practices.

Join a multinational team and contribute to ISO 27001 / SOC 2 readiness, manage partner assessments, and lead vulnerability management initiatives across our AWS environment.

Qualifications

• At least 5 years of information security experience across technical, governance, risk and compliance.
• Strong knowledge of AWS security, including IAM, network security, logging and encryption.
• Experience managing vulnerability management processes and remediation workflows.
• Familiarity with ISMS frameworks and standards (ISO 27001 / SOC 2).
• Good understanding of GDPR and data protection, with partner-facing documentation.
• Structured, self-organised, and able to drive initiatives across international teams.

Responsibilities

• Maintain and enhance security documentation and ISMS, while helping build a strong trust and security framework for partners.
• Manage partner security assessments and questionnaires, creating reusable documentation and standardized responses.
• Lead the vulnerability management lifecycle, including visibility, remediation coordination with internal teams, and reporting.
• Assess our AWS environment, recommend security improvements, and provide guidance on cloud security topics such as IAM, network security, logging, and encryption.
• Serve as the main security point of contact for developers and Corporate IT, supporting secure design reviews, threat modeling, endpoint security, identity management, and SaaS security.
• Coordinate external penetration tests, support GDPR-related initiatives with our Legal team, and contribute to ISO 27001 and/or SOC 2 readiness efforts.

Skills

AWS security

Vulnerability management

ISMS

GDPR

Security governance

Threat modeling

Tools

AWS IAM

Security tooling

Encryption tooling

Job description

Sovendus GmbH is seeking an Information Security Manager to strengthen our security program in a remote, Spain-based role. You will coordinate governance, risk and compliance activities while guiding developers and Corporate IT on secure design and cloud security best practices.

Join a multinational team and contribute to ISO 27001 / SOC 2 readiness, manage partner assessments, and lead vulnerability management initiatives across our AWS environment.