Senior information security consultant

Wave Search; Madrid; Híbrido; EUR 40.000 - 55.000; Jornada completa

Descripción de la vacante

A global cybersecurity consultancy is seeking a Senior Information Security Consultant to lead impactful GRC initiatives. The candidate will work remotely/hybrid, developing comprehensive cybersecurity frameworks and policies while advising leadership on security matters. This role requires over 5 years of experience, fluency in Spanish and English, and a strong commitment to professional development. Offer includes a supportive culture, health insurance, multisport membership, and flexible hours.

Servicios

Enhanced health insurance packages

Multisport membership

Continuous development support for certifications

Remote working + flexible hours

Formación

• 5+ years’ experience in information security.
• Strong problem‑solving capability and attention to detail.
• Certifications such as CISA, CISM, CISSP are a plus.

Responsabilidades

• Develop and implement information and cyber security frameworks, strategies, policies, and procedures.
• Act as a trusted advisor to leadership on all matters relating to information security.
• Lead and manage information security projects.
• Conduct cyber and information security risk analyses.
• Perform compliance assessments, identify gaps, and recommend improvements aligned to standards.

Conocimientos

Problem-solving skills

Communication skills

Attention to detail

Fluency in Spanish

Fluency in English

Educación

University degree or relevant professional education

Herramientas

ISO 27001

NIST

GDPR

CISA

CISM

CISSP

Descripción del empleo

Senior Information Security Consultant

Remote / Hybrid

€40,000 – €55,000 + Benefits (DOE)

Are you an experienced Information Security professional looking to take the lead on impactful GRC initiatives across global projects? This role offers the chance to work in an international environment, supporting clients across sectors such as maritime, energy, and government while shaping robust, modern cyber security practices.

The Opportunity

You’ll join an established Governance, Risk & Compliance (GRC) team, playing a key role in protecting clients’ information systems, strengthening their security posture, and ensuring alignment with key regulatory and industry frameworks. This position is ideal for someone who enjoys autonomy, complex problem‑solving, and working on both local and global‑scale cybersecurity projects.

Key Responsibilities

• Develop and implement information and cyber security frameworks, strategies, policies, and procedures.
• Act as a trusted advisor to leadership on all matters relating to information security.
• Lead and manage information security projects.
• Conduct cyber and information security risk analyses.
• Perform compliance assessments, identify gaps, and recommend improvements aligned to standards such as ISO 27001, NIS2, DORA, NIST, GDPR, PCI DSS.
• Deliver cybersecurity awareness training and education.
• Carry out social engineering–based awareness testing.

About You

• University degree or relevant professional education.
• 5+ years’ experience in information security.
• Strong problem‑solving capability and attention to detail.
• Excellent communication skills.
• High level of accountability and commitment to continuous development.
• Fluency in Spanish and English (spoken and written).
• Certifications such as CISA, CISM, CISSP are a plus.

What You’ll Get

• A supportive, open‑minded culture with real autonomy.
• Exposure to challenging, cutting‑edge projects across global industries.
• Continuous development including support for industry certifications (ISACA, ISC2, etc.).
• Work alongside respected experts in cyber and information security.
• Hybrid working + flexible hours.
• Enhanced health insurance packages.
• Multisport membership.
• Regular social events and team‑building activities.