This is us

At Avenga, we believe that human creativity empowers technology that matters. Operating globally, our 6000+ specialists provide a full spectrum of services, including business and tech advisory, enterprise solutions, CX, UX, and UI design, managed services, product development, and software development.

This is the job

We are seeking an Information Security Analyst Contractor to support risk management, ISMS maintenance, compliance, and audit readiness.

The role involves improving security processes, maintaining documentation and registers, supporting risk analysis and treatment planning, and guiding new team members on ISMS procedures. Strong attention to detail, communication skills, reliability, and the ability to meet tight deadlines are essential.

This is you

- 5+ years of experience in information security, IT audit, compliance, or risk management.
- Ability to conduct and document security risk analyses after onboarding.
- Familiarity with ISMS processes, audit evidence collection, and data gathering.
- Strong technical documentation, reporting, and communication skills.
- Proficiency in Microsoft Office, including Excel, SharePoint, Word, and Visio.
- Ability to meet deadlines, deliver accurate work, and work independently.
- Strong collaboration, coordination, adaptability, and openness to feedback.
- Bachelor’s degree in IT, Information Security,



Computer Science, or a related field.

Nice-to-have skills:

- Knowledge of PART-IS requirements.
- ISO 27001 Foundation certification or equivalent training.
- Understanding of information security risk management principles.
- Familiarity with CIS Critical Security Controls.
- Introductory Internal Auditor training or experience.
- Experience with cybersecurity maturity assessments (ideally ATM CMM).
- Hands-on support of ISMS, audit, compliance, or supplier security activities.

This is your role

- Perform an annual ISMS maturity self-assessment using the ATM Cybersecurity Maturity Model.
- Conduct an annual review of ISMS process KPIs.
- Implement approved ISMS improvements.
- Verify the effectiveness of implemented information security actions.
- Review internal and external audit findings and monitor associated corrective actions.
- Maintain the security baseline and threat catalogue.
- Review feedback from incidents and other relevant sources.
- Maintain the supplier database and liaise with Procurement and Technical Managers to obtain and verify supplier information.
- Provide ISMS process training and briefings to new team members.
- Support the Security team with day-to-day activities.
- Maintain an action register for ISMS maintenance activities.

📌 Information technology security analyst (España)
🏢 Avenga
📍 España