IT Security Officer

IT Security Officer I&O

Location - Madrid (hybrid mode)

The Security Officer for Infrastructure & Operations (I&O) is responsible for ensuring information security and compliance across the Global Infrastructure & Operations (GIO) landscape. This role supports the development and execution of long-term security strategies, ensuring alignment with global standards, risk management practices, and regulatory requirements.

Key Responsibilities:

• Risk Management: Conduct risk assessments for new projects and tools, manage risk registers, and collaborate on global threat responses.
• Compliance: Support audits, evidence collection, and control process development in coordination with global GRC teams.
• Project & Change Support: Review and approve security aspects of changes, projects, and initiatives; represent security in change advisory boards.
• Security Operations (Protect, Detect, Respond):
  • Oversee patch management, backup, disaster recovery, malware protection, and network security configurations.
  • Lead vulnerability management and coordinate threat hunting with third parties.
  • Manage security incidents, including major incidents and forensic investigations.

Job Dimensions:

• Scope: Security and compliance for GIO services.
• Stakeholders: Internal IT teams, security operations centers, auditors, and external service providers.

Candidate Profile:

• Education: Bachelor’s in Computer Science/Engineering or related field; security certifications (e.g., CISSP, CISM, ISO 27001) preferred.
• Experience: 10+ years in IT security, with expertise in risk management, audits, and security operations.
• Skills: Strong technical knowledge in infrastructure, cloud, and network security; project management; regulatory compliance (e.g., ISO 27001, GDPR).
• Competencies: Strong communication, leadership, decision-making, and stakeholder management skills.
• Languages: Fluent in English; additional languages are a plus.

Specific expertise in one or more of the following would be a plus: 

• Cloud Security → CCSP / GCSA
• Network Security → CND / CCNP / CCNA Security / CEH 
• System/Infrastructure Security → CISSP / CISM / CISA 
• Industrial Technology (OT) Security → CDSE / GICSP / ISP / ISOC