Security Program Director

Senovo IT Ltd; Barcelona; Híbrido; EUR 110.000 - 170.000; Jornada completa

Descripción de la vacante

Senovo IT Ltd. is seeking an experienced Security Program Director to lead a company-wide security programme from Barcelona.

This hybrid, 12-month contract role focuses on developing and overseeing an integrated security programme across multiple geographies and business units, with vendor and executive stakeholder engagement, and no hands-on technical duties. The successful candidate will drive cloud security strategy across AWS and Azure, manage governance and compliance, and present risks and

Formación

• 10+ years in cybersecurity or information security
• 5-7+ years in a leadership or director role
• Proven experience leading enterprise-wide security programmes
• Strong knowledge of GDPR, DORA or similar frameworks
• Experience presenting to boards and executives
• Background in incident response and crisis management
• Experience with ISO 27001 and SOC 2 audits/certifications

Responsabilidades

• Lead the enterprise-wide security programme across multiple business units and geographies
• Establish and oversee security governance frameworks and compliance initiatives
• Partner with C-level executives, board members, sponsors, and external auditors
• Drive cloud security strategy across AWS and Azure environments
• Present security risks, KPIs, and strategic recommendations to executive leadership
• Lead organisational change, driving adoption of security policies and best practices
• Oversee security compliance, risk management, and governance activities

Conocimientos

Security leadership

Enterprise security

Governance & compliance

Cloud security strategy

Stakeholder communication

Descripción del empleo

Security Program Director – Barcelona (Hybrid) | 12-Month Contract + Extensions

We are looking for an experienced Security Program Director to lead a company-wide security programme for a global organisation.

This is a strategic leadership role responsible for developing, implementing, and overseeing an integrated security programme that protects critical assets across multiple business units and international locations. You will lead cross-functional security teams, work closely with executive sponsors and C-level stakeholders, and drive security strategy across the business. Technical delivery is supported by dedicated security specialists, so this is not a hands-on technical role.

Contract

12 months + extensions

Languages

English (mandatory), Spanish and French are advantageous

Key Responsibilities

• Lead the enterprise-wide security programme across multiple business units and geographies
• Establish and oversee security governance frameworks and compliance initiatives
• Partner with C-level executives, board members, sponsors, and external auditors
• Drive cloud security strategy across AWS and Azure environments
• Present security risks, KPIs, and strategic recommendations to executive leadership
• Lead organisational change, driving the adoption of security policies and best practicesOversee security compliance, risk management, and governance activities

Required Experience

• 10+ years' experience in cybersecurity and information security
• 5-7+ years in a leadership or director-level position
• Proven experience leading enterprise-wide security programmes
• Strong knowledge of international regulatory frameworks including GDPR, DORA, and similar
• Experience presenting to boards, executives, and senior stakeholders
• Background in incident response and crisis management
• Experience managing security audits and certifications such as ISO 27001 and SOC 2

Preferred Experience

• Digital transformation and security integration programmes
• Vendor and third-party risk management
• Supply chain security

Key Skills

• Security governance and compliance
• Risk assessment and mitigation
• Strategic leadership
• Cloud security (AWS and Azure)
• Cybersecurity frameworks including NIST CSF, ISO 27001/27002, CIS Controls, and COBIT