Key Responsibilities

1. Develop, implement, and maintain the Company’s information security framework, policies, and procedures in line with regulatory and ISO 27001 standards, as well as local Spanish cybersecurity regulations.

2. Conduct regular risk assessments, vulnerability analyses, and penetration testing of systems and networks, including those used for Spain-based operations.

3. Oversee access controls, incident response procedures, and data protection measures for all information systems, ensuring alignment with local operational needs.

4. Ensure compliance with data protection (GDPR and local Spanish data protection regulations) and operational resilience requirements (DORA).

5. Coordinate with third-party vendors (including Spain-based providers) and ensure outsourced IT services meet security and confidentiality standards.

6. Provide IT security training and awareness to employees, including tailored content for Spain-based teams where applicable.

7. Report security incidents and key metrics to senior management and, where applicable,



to CSSF and relevant local Spanish regulatory bodies.

Qualifications & Experience

1. Bachelor’s or Master’s degree in Computer Science, Information Security, or related discipline.

2. Professional certification such as CISSP, CISM, or ISO 27001 Lead Implementer preferred.

3. 3+ years of experience in IT security or cybersecurity risk management, preferably in financial services in Europe, with preference given to candidates who have worked in Spain.

4. Strong knowledge of network security, encryption, access management, and cloud security.

5. Ability to communicate complex technical issues to non-technical stakeholders.

6. Fluent in English (verbal & written, mandatory); proficiency in Spanish or Chinese (verbal & written) is a strong plus.

7. Valid right to work in Spain (mandatory).

Job Type: Full-time

Pay: Up to 7,000.00€ per month

Work Location: Remote

📌 IT Security Officer (Madrid)
🏢 Loodapay LU
📍 Madrid