Overview

In this role you will lead cybersecurity and regulatory compliance projects for top-tier clients, coordinating cross-functional teams to ensure quality, deadlines, and client satisfaction. You’ll apply risk and compliance expertise across ISO 27001, ENS, and related frameworks while collaborating with technical and business teams. The position combines hands-on risk analysis with policy development and security planning, delivering actionable security outcomes. This is a client-facing role with opportunities to mentor others and expand autonomy on larger initiatives. You will work across sectors, shaping security from design to operation and driving measurable impact.

Compensaciones / Beneficios

- Hybrid work model
- 8 weeks remote work per year
- Adaptable working hours
- Summer Fridays and shorter Fridays
- Personalized career plan and training
- Relocation package

Responsabilidades

- Lead cybersecurity and regulatory compliance projects for top-tier clients
- Coordinate project teams, assign tasks and supervise deliverable quality
- Execute and review risk analysis and risk management activities
- Develop and validate security policies, processes and security plans




- Collaborate with technical and business teams to integrate security from design through operations
- Serve as the operational client contact, monitoring milestones, risks and dependencies
- Collaborate with senior profiles on larger projects to contribute to technical execution
- Advise clients on best practices and regulatory requirements

Requisitos principales

- Degree in Engineering, Computer Science or related field
- B2 level English or higher
- 3–5 years of experience in information security
- Basic knowledge of Cloud and Web architectures
- Experience in risk, threat and vulnerability management and analysis
- Experience with security standards (ISO 27001, ENS, etc.)
- Preferred: project management or technical coordination experience
- Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CISM, CRISC or PMP
- Experience in direct client interaction
- Strong planning, organization and multitasking abilities

- client-facing communication
- project coordination
- team collaboration
- risk management and analysis
- threat and vulnerability management
- security policy development

📌 Cybersecurity, Risk and Regulatory Compliance Consultant (Madrid)
🏢 GMV
📍 Madrid