Leading multinational company specialized in the management of critical infrastructure and energy logistics (oil & gas), with an international presence. The company operates in highly regulated, distributed and operationally critical environments, with a culture built around operational excellence, safety, sustainability and people development. As part of the evolution of its global cybersecurity operating model, we are looking for a Business Information Security Officer (BISO) to act as the primary cybersecurity representative for one of their business areas.

Reporting directly to the CISO, this role will work closely with, IT, Operations, Compliance, Legal and external service providers. Lead the cybersecurity function for one of their business areas, ensuring the effective implementation of the company's cybersecurity strategy within an international, multi-site and highly regulated environment. Act as the main cybersecurity point of contact for the business, ensuring effective risk management, regulatory compliance and alignment between the global cybersecurity strategy and business operational needs, contributing to a secure and resilient operation.

Governance, Risk & Compliance: Identify and manage cybersecurity risks, coordinate remediation plans, oversee control effectiveness and ensure compliance with regulatory requirements and cybersecurity standards. Lead and coordinate cybersecurity programmes and initiatives, ensuring effective execution, follow-up and alignment with business priorities.

Business & Stakeholder Engagement:



Work closely with Business, IT, Operations, Compliance and Legal teams to embed cybersecurity into strategic projects and transformation initiatives. Audits, Reporting & Governance: Participate in audits, compliance reviews and governance forums, providing executive reporting on cybersecurity risks, controls and initiatives. Third-Party Risk Management: Oversee cybersecurity risks associated with external providers and critical third parties, ensuring compliance with the organisation’s security requirements.

Contribute to the development of cybersecurity capabilities, operating models and strategic roadmaps aligned with the needs of the business. University degree in Engineering, Technology, Cybersecurity, Risk Management, Business Administration or a related discipline.

Experience: Proven experience in Cybersecurity Governance, Risk & Compliance (GRC), Business Information Security, Risk Management or similar functions, including risk management, audits, compliance programmes and interaction with senior stakeholders.

Languages: High level of English with the ability to work effectively in international environments. Ability to influence and engage effectively with senior stakeholders. A highly visible role with real influence on the cybersecurity strategy of an international and business-critical operation. Participation in integral initiatives and collaboration with multidisciplinary teams across multiple countries and operational environments.

📌 Senior Information Technology Security Officer (Madrid)
🏢 Gt Global Talent
📍 Madrid