About our client At Infront, we are committed to fostering an inclusive workplace, recognizing our diverse team as one of our most valuable assets.

For 25 years, Infront has been empowering financial market experts to make faster, smarter, compliant decisions. Over time, we have expanded our foundation by bringing together companies with more than 75 years of combined market experience and trust. All these years on, were still building. Opening our new Madrid office this summer marks an exciting next chapter, and were growing our team in order to write it.

Our strength lies in market data, delivering reliable, accurate information through a powerful suite of tools, spanning Data Intelligence, Wealth Management solutions, and Trading & Investor solutions, that our users depend on every day. Today, we are one of Europe's leading providers of market data and financial software, helping professionals navigate markets with confidence and speed.

About the Role We're seeking an experienced Head of Information Security to strengthen and improve the company's security posture; this is a hands‐on leadership role suited to someone who enjoys rolling up their sleeves, solving problems, and directly implementing improvements, rather than focusing primarily on high‐level strategy. You will act as a pragmatic security leader who actively contributes to day‐to‐day security operations and initiatives, while also line managing 2–3 Information Security Engineers, providing guidance, support, and technical direction to drive practical security outcomes across the organisation.

Responsibilities Lead a major ISO 27001 compliance programme across the organisation

Monitor and continuously improve the organisation's security posture

Develop, maintain, and update information security policies in line with industry standards, ensuring company‐wide compliance





Partner closely with engineering teams to embed security into software development processes

Ensure compliance with relevant financial services regulations and standards

Manage security audits and penetration testing activities

Implement staff training initiatives to increase security awareness (e.g. phishing, access control)

Hire team members and select external vendors as appropriate

Operate within budget constraints, leveraging open‐source solutions where beneficial

Manage security incidents effectively, with the ability to respond quickly under pressure

Provide regular reporting on security status and KPIs to senior management

Who you are Requirements 6+ years of professional experience in cybersecurity, with at least 2 years of team leadership experience

Technical background in computer science, software development, or a related field

Proven track record of improving cybersecurity in companies with 100–1000 employees

Hands‐on experience implementing ISO 27001

Expertise in risk management, including threat analysis and risk acceptance vs. mitigation

Familiarity with security controls in at least one major cloud platform (AWS, Azure, or GCP)

Strong analytical and problem‐solving skills, including root cause analysis and sound build‐vs‐buy decision‐making

Good understanding of GDPR regulations

Solid project and change management skills, with a track record of delivering initiatives to completion

Strong leadership skills,



including for teams you do not directly manage

Strong communication, presentation, and stakeholder management skills, with the ability to influence without formal authority

Fluent in written and spoken English

Nice to have, experience with DORA regulation

NIST Cyber security framework

Cyber Resiliance Act

Our offer Health & wellness: Benefit from wellbeing initiatives tailored to local needs, including access to an employee assistance programme that provides confidential support to employees and their families.

Holiday: Enjoy competitive holiday entitlement aligned with local markets, so you can rest and recharge.

Remote work: Enjoy the opportunity to work two days a week from home, with adaptable working hours where possible. You may also request to work up to four weeks per year from a different location.

Learning & development: Support your career progression with access to learning resources, ongoing conversations with your manager, and opportunities to share the knowledge you gain with your team.

Culture & impact: Be part of an international team with a startup mindset and play a key role in making a meaningful impact.

Our offices: Work from Europe's leading financial centres and be at the heart of where finance happens.

Additional notes All candidates selected for employment are subject to Pre‐Employment Screening. This process includes professional reference and background checks conducted by our third‐party partner, ZINC. These screenings are part of our commitment to ensuring a secure, compliant, and trustworthy workplace.

This position will be based in our new office in Madrid; however, we also welcome applications from candidates located in London or Oslo who have the legal right to work in their respective location.

We kindly ask that you submit your CV in English.

📌 Head of Information Security (Madrid)
🏢 Ersilia
📍 Madrid