Security Program Manager

BrainRocket; Valencia; On-site; EUR 50,000 - 70,000; Full time

Benefits offered by this job

Relocation package

Learning and development opportunities

23 days annual vacation

Job summary

A global technology company is seeking a Security Program Manager to lead and coordinate security initiatives. The ideal candidate will have over 5 years of experience in security program management, strong stakeholder management skills, and fluency in English. This full-time role is based in Valencia, Spain, and includes a relocation package, competitive remuneration, and opportunities for learning and development.

Qualifications

• 5+ years of experience in security program/project management.
• Strong understanding of frameworks like ISO 27001, NIST.
• Proven track record of cross-functional security initiatives.
• Excellent stakeholder management and communication skills.
• Strong organizational and prioritization abilities.
• Fluency in English required.

Responsibilities

• Drive planning, coordination, and execution of security initiatives.
• Manage cross-functional security projects and compliance.
• Facilitate communication between stakeholders and resolve conflicts.
• Identify, assess, and prioritize security risks.
• Maintain documentation for auditability.

Skills

Project management

Information security principles

Stakeholder management

Risk management

Communication skills

Organizational skills

English fluency

Job description

Overview

Join to apply for the Security Program Manager role at BrainRocket.

BrainRocket is a global company creating end-to-end tech products for clients across Fintech, iGaming, and Marketing. We offer a full-time job in the office with relocation support as needed. Our team includes 1,300 professionals delivering innovative ideas and products.

Responsibilities

• The Security Program Manager is responsible for driving the planning, coordination, and execution of security initiatives and projects across the organization.
• Ensure alignment between security objectives and business goals; manage cross-functional security projects; establish governance to reduce risk and maintain compliance.
• Act as the central point of coordination to enable efficient execution and delivery of security projects into production; facilitate communication between stakeholders; ensure security becomes an integral part of business processes.
• Program ownership: Lead the planning, execution, and successful delivery of security initiatives and projects, ensuring they reach production and deliver measurable business value.
• Alignment with business goals: Translate security objectives into actionable programs aligned with organizational strategy and regulatory requirements.
• Cross-functional coordination: Serve as the primary contact between Security, IT, Product, Engineering, Legal, HR, and other units to ensure collaboration.
• Governance & reporting: Establish governance models, track milestones, define KPIs/metrics, and report status and risks to senior management.
• Risk management: Identify, assess, and prioritize security risks; drive mitigation plans and escalate critical issues as needed.
• Policy & compliance enablement: Ensure projects support compliance with standards (ISO 27001, SOC 2, GDPR) and internal policies.
• Change management: Develop rollout strategies for new security controls with adoption across the organization.
• Stakeholder communication: Maintain clear, timely communication with all stakeholders, including C-level executives.
• Issue resolution: Anticipate roadblocks, manage dependencies, and resolve conflicts to keep projects on track.
• Continuous improvement: Identify inefficiencies and propose improvements, frameworks, or automation to enhance scalability.
• Awareness & training support: Coordinate security awareness initiatives and embed program outcomes into practices.
• Budget & resource planning: Work with leadership to estimate costs, allocate resources, and improve delivery efficiency.
• Vendor & third-party coordination: Manage external security partners, consultants, or vendors for outsourced projects.
• Documentation: Maintain up-to-date documentation of project scope, timelines, ownership, and deliverables for auditability.

Qualifications

• Must-Have:
• 5+ years of experience in security program / project management or related fields.
• Strong understanding of information security principles, frameworks (e.g., ISO 27001, NIST, SOC 2) and risk management.
• Proven track record of delivering cross-functional security initiatives from planning to production.
• Excellent stakeholder management, communication, and presentation skills, including C-level reporting.
• Ability to build governance processes, track KPIs, and ensure accountability across teams.
• Strong organizational and prioritization skills in a fast-paced environment.
• Fluency in English (written and spoken).
• Nice-to-Have:
• Technical background in IT, cloud, or application security.
• Experience with GRC tools.
• Familiarity with DevSecOps practices and CI/CD integration.
• Certifications such as CISSP, CISM, PMP, or similar.
• Experience in regulated industries (finance, gaming, healthcare, etc.).
• Previous experience in international or distributed teams.

Benefits

• Relocation package (tickets, hotel stay for up to 2 weeks, and visa relocation support).
• Learning and development opportunities; language support with partial compensation for Spanish classes.
• Time for rest with 23 working days of annual vacation and additional paid sick days.
• Competitive remuneration with annual review.
• Plus, opportunities to work in a fast-paced, impactful environment.

Additional Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Other
• Industries: Software Development and Gambling Facilities and Casinos

Bold moves start here. Make yours. Apply today!