Who are we?
Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses worldwide. With more than 1,000 clients globally, we have been delivering impactful solutions across major projects for over a decade, supported by an international team of more than 7,600 professionals across 5 continents and 60+ countries.
Our expertise spans four key Business Lines: Information System & Digital, Telecom, Life Sciences, and Engineering. At Amaris Consulting, we are committed to building and nurturing a strong talent community where every team member can develop their skills, embrace new challenges, and achieve their full potential.
Joining Amaris means becoming part of an international environment where innovation, collaboration, and professional growth are at the heart of everything we do.
Job Description
As a Security Program Director , you will join our team in Barcelona to lead and oversee a company-wide cybersecurity program within an international environment.
You will be responsible for defining the cybersecurity strategy, establishing security governance frameworks, managing complex security initiatives, and ensuring the protection of critical assets across multiple business units and geographies.
You will act as a strategic partner for executive stakeholders, translating cybersecurity risks, security metrics, and compliance requirements into business-oriented insights. You will drive security transformation initiatives, oversee operational security activities, and ensure alignment with international regulations and industry standards.
Your missions
Define, implement, and oversee a comprehensive cybersecurity program aligned with business objectives
Establish security governance frameworks, policies, processes, and operating models
Lead cybersecurity initiatives across multiple business units, regions, and regulatory environments




Manage relationships with executive stakeholders, business leaders, technical teams, and external auditors
Present security strategy, risk assessments, KPIs, and program status to senior leadership
Ensure compliance with international security standards and regulations, including GDPR, DORA, ISO 27001, and SOC 2 requirements
Oversee operational IT security domains, including infrastructure security, endpoint protection, access management, and security monitoring
Drive incident response and crisis management activities, including coordination during major security incidents
Support the continuous improvement of security capabilities, processes, and organizational maturity
Manage security risks, vulnerabilities, and improvement initiatives through effective monitoring and reporting
Promote security awareness and adoption of cybersecurity practices across the organization
Your profile
Minimum 15 years of experience in cybersecurity, information security, or related fields
At least 7-10 years of experience in leadership or director-level cybersecurity positions
Proven experience managing enterprise-wide security programs across multiple business units and international environments
Strong experience with cybersecurity governance, risk management, compliance, and audit programs
Experience presenting security strategies, risks, and assessments to C-level stakeholders, executives, and external auditors
Strong knowledge of cybersecurity frameworks and standards such as NIST CSF, ISO 27001/27002, CIS Controls, and COBIT




Good understanding of security technologies including SIEM, EDR, vulnerability management, IAM, and DLP solutions
Knowledge of network and infrastructure security principles, including firewalls, IDS/IPS, VPNs, and Zero Trust architectures
Experience with application security and secure software development lifecycle (SDLC) practices
Expertise in data protection, privacy principles, encryption, and data classification
Experience defining security metrics, KPIs, and reporting models to measure program effectiveness
Knowledge of cloud security architectures, especially Azure and AWS environments
Experience with threat intelligence, risk assessments, vulnerability management, and threat modelling
Strong leadership, communication, and stakeholder management skills
Ability to operate effectively in international and multicultural environments
Fluent English is mandatory
What we offer
An international community bringing together more than 110 nationalities
A collaborative environment where trust and autonomy are key values
A strong learning culture supported by our internal Academy, with more than 250 training modules available
A dynamic workplace with regular internal events, team-building activities, and opportunities to connect with colleagues
The opportunity to work on challenging international projects with leading organizations across different industries
A company culture focused on sustainability, innovation, and positive impact through our ESG initiatives
Amaris Consulting is proud to be an equal-opportunity employer. We are committed to fostering diversity and inclusion within our teams and welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or any other characteristic protected by law.

📌 Security Program Manager (Barcelona)
🏢 Amaris Consulting
📍 Barcelona