Security Program Director

Business Insights; Barcelona; Presencial; EUR 150.000 - 190.000; Jornada completa

Descripción de la vacante

Business Insights in Barcelona, Spain is seeking an experienced Security Program Director to lead and oversee the organization's global security program across multiple units and geographies. This strategic leadership role reports to executive leadership and drives an integrated security framework.

You will translate security risks, compliance obligations, and program performance into business insights for decision-making at the board level, define governance, manage incidents, and align

Formación

• 15+ years in cybersecurity and information security roles.
• 7–10+ years in leadership or director-level positions.
• Proven experience managing enterprise-wide security programs across multiple units and geographies.
• International security program management across GDPR, DORA, etc.
• Experience presenting security strategy, risk assessments, and results to C-level executives, boards, and auditors.
• Hands-on leadership of major incident response and crisis management initiatives.
• Strong background in operational IT security oversight.
• Security compliance and audit program leadership with certifications.

Responsabilidades

• Lead the enterprise-wide security program across regions and jurisdictions.
• Define and maintain security governance frameworks, policies, and strategic roadmaps.
• Present security strategy, risk assessments, and program results to executives and the board.
• Direct security compliance initiatives and audits, ensuring alignment with standards.
• Oversee operational IT security, including infrastructure security, IAM, and monitoring.
• Lead incident response and crisis management during security events.
• Establish security KPIs and metrics to measure program effectiveness.
• Drive security integration within digital transformation initiatives.
• Coordinate with legal, compliance, operations, and business leaders to balance security with business priorities.
• Manage security risks across international regulatory environments and multiple business functions.

Conocimientos

Leadership

Strategic thinking

Executive communication

Risk management

Global cross-functional leadership

Security governance

Herramientas

SIEM

EDR

IAM

DLP

Vulnerability management

COBIT

Descripción del empleo

We are looking for an experienced Security Program Director to lead and oversee the organization's global security program across multiple business units and geographies.

This strategic leadership role is responsible for developing, implementing, and continuously improving an integrated security framework that protects critical business assets while ensuring compliance with international regulatory requirements.

The Security Program Director will serve as a key advisor to executive leadership, translating security risks, compliance obligations, and program performance into clear business insights for decision-making at board level.

Key Responsibilities

• Lead the enterprise-wide security program across multiple regions and jurisdictions.

• Define and maintain security governance frameworks, policies, and strategic roadmaps.

• Present security strategy, risk assessments, program performance, and recommendations to executive and board stakeholders.

• Direct security compliance initiatives and audit programs, ensuring alignment with relevant standards and certifications.

• Oversee operational IT security capabilities, inceluding infrastructure security, endpoint protection, identity and access management, and security monitoring.

• Lead incident response and crisis management activities during security events and compliance incidents.

• Establish security KPIs and metrics to measure program effectiveness and communicate outcomes to leadership.

• Drive security integration within digital transformation initiatives and evolving technology environments.

• Coordinate with legal, compliance, operations, and business leaders to balance security requirements with business priorities.

• Manage security risks across international regulatory environments and multiple business functions.

Required Experience

• 15+ years of experience in cybersecurity and information security roles.

• 7–10+ years in leadership or director-level positions.

• Proven experience managing enterprise-wide security programs across multiple business units and geographies.

• International security program management experience across diverse regulatory environments (including GDPR, DORA, etc.).

• Experience presenting security strategy, risk assessments, and program results to C-level executives, boards, and external auditors.

• Hands-on leadership of major incident response and crisis management initiatives.

• Strong background in operational IT security oversight.

• Security compliance and audit program leadership experience, including maintaining recognized certifications.

• Experience supporting digital transformation initiatives from a security perspective.

Required Technical Skills

• Cybersecurity frameworks and standards: NIST CSF, ISO 27001/27002, CIS Controls, COBIT.

• Security technologies including SIEM, EDR, vulnerability management, IAM, and DLP.

• Network and infrastructure security principles, including firewalls, IDS/IPS, VPNs, and Zero Trust architectures.

• Application security and secure SDLC practices.

• Data protection, encryption, data classification, and privacy-by-design principles.

• Security KPI development and reporting.

• Threat intelligence, threat modeling, risk assessment, and vulnerability management.

Nice to Have

• Vendor and third-party risk management.

• Supply chain security expertise.

• Cloud security architecture experience within AWS, Azure, and hybrid environments.