Information Security Consultant – ISMS

GMV Insyen AG; Lisboa; Hybrid; EUR 50,000 - 70,000; Full time

Benefits offered by this job

Hybrid working

Relocation package

Language training

Wellbeing program

Job summary

GMV Spain is seeking professionals to join its information security team. You will contribute to implementing and maintaining ISMS for space-sector projects, ensuring compliance with international standards and security requirements across Europe.

Candidates should have experience with ISO/IEC 27001, risk assessment methodologies (ISO 27005), and hold relevant security certifications. English proficiency is essential for our international environment.

Qualifications

• Experience in implementing and auditing ISO/IEC 27001.
• Knowledge of ISO/IEC 27005 risk assessment methodologies.
• Experience working in an international environment.

Responsibilities

• Contribute to ISMS implementation and maintenance on international projects.
• Perform information security risk assessments.
• Conduct audits against regulatory and security frameworks.
• Support remediation recommendations based on findings.
• Travel occasionally within Europe (2–3 times per year).

Skills

Information Security

Risk assessment

Auditing

Education

ISO/IEC 27001 Lead Implementer

CISM

CISSP

GDPR/Privacy

Tools

ISO 27001 Lead Auditor

Job description

If you want to develop your career through international cybersecurity projects with real impact on the space sector, this is the place for you. You will join the international SES team and contribute to a long-running information security management programme for a major European client, working alongside specialised professionals in a collaborative and technology-driven environment.

We´ll get to the point; we'll tell you what's not on the web.If you want to know more about de GMV

WHAT CHALLENGE WILL YOU BE TAKING ON?

As part of our team, you will contribute to the implementation and maintenance of Information Security Management Systems (ISMS), helping protect relevant space-sector environments and ensuring compliance with international standards and sector-specific security requirements.

Your main responsibilities will include:

• Participating in national and international ISMS implementation and maintenance projects.
• Performing information security risk assessments.
• Conducting compliance assessments against different regulatory and security frameworks.
• Participating in internal and external audits.
• Defining remediation recommendations and measures based on assessment and audit findings.

WHAT DO WE NEED IN OUR TEAM?

We are looking for professionals with an interest and experience in information security, particularly in the implementation and/or auditing of ISO/IEC 27001, together with knowledge of information security risk assessment methodologies such as ISO/IEC 27005.

A high level of written and spoken English is required, as you will work in an international environment.

We will also value knowledge and/or certifications in:

• ISO/IEC 27001 Lead Implementer or Lead Auditor.
• CISM, CISSP or CRISC.
• Privacy and GDPR.
• OSINT and ethical hacking.
• Incident management and response.
• SecDevOps, ISO 22301 (business continuity) and PCI DSS.

The position requires occasional travel within Europe, approximately 2-3 times per year.

WHAT DO WE OFFER?

Hybridworking model and 8 weeks per year of teleworking outside your usual geographical area.

Flexible start and finish times, and intensive working hours Fridays and insummer.

Personalizedcareer plan development, training and language learning support.

National and international mobility. Do you come from another country?We can offer you a relocation package.

Competitivecompensation with ongoing reviews, flexible compensation anddiscount on brands.

Wellbeingprogram: Health, dental and accident insurance; free fruit and coffee, physical,mental and financial health training, and much more!

In our recruitment processes youwill always have telephone and personal contact, face-to-face or online, withour talent acquisition team. In addition, bank transfers and bank cards will neverbe requested. If you are contacted through another process, please get in touch with the person responsible for the selection process.

We promote equal opportunities inrecruitment, and we are committed to inclusion and diversity.