Remote Information Security Lead — ISO 27001 & GRC

Modaxo; Portugal; Remote; EUR 90,000 - 120,000; Full time

Job summary

Modaxo is seeking an Information Security Lead to drive governance, risk management and ISO 27001 initiatives across its EMEA/Asia portfolio, serving thousands of users. You will lead a team of security professionals, guide business units through compliance journeys, and influence senior stakeholders while maintaining a pragmatic security posture across a decentralised environment.

You will translate complex risk into clear business language, establish baselines, collaborate with IT and business

Qualifications

• Proven information security leadership experience across multiple entities
• Strong working knowledge of ISO 27001 including implementation and certification support
• Familiarity with NIST CSF, CIS Controls and SOC 2
• Track record of running security governance and compliance programmes across multiple business units
• Solid understanding of UK and EMEA regulation including GDPR and the Data Protection Act
• Excellent stakeholder and communication skills translating risk to senior audiences

Responsibilities

• Establish and continuously improve the security governance framework across all business units
• Define and enforce policies and standards aligned to group requirements, ISO 27001, NIST and CIS Controls
• Maintain a portfolio-wide risk register and ensure timely remediation of risks
• Report risk posture and compliance status to Group Security Leadership and Risk Committees
• Oversee GDPR/UK GDPR compliance and third-party security risk assessments
• Lead, mentor and develop a small team of security analysts and engineers

Skills

Security leadership

ISO 27001 expertise

Stakeholder management

Risk governance

Security governance

Education

CISSP

ISO 27001 Lead Implementer

CISM

Tools

SIEM

Vulnerability management

GRC tooling

Job description

Modaxo is seeking an Information Security Lead to drive governance, risk management and ISO 27001 initiatives across its EMEA/Asia portfolio, serving thousands of users. You will lead a team of security professionals, guide business units through compliance journeys, and influence senior stakeholders while maintaining a pragmatic security posture across a decentralised environment.

You will translate complex risk into clear business language, establish baselines, collaborate with IT and business