¿Dónde vas a trabajar?

The client is a large international technology and engineering consultancy, operating across multiple countries and supporting complex projects for major global organisations. It offers a highly international, multi-entity environment, with technology and cybersecurity playing a key role in its operations.

¿Qué harás en tu reciente puesto?

- Lead cybersecurity governance, risk management and security strategy across the region and its subsidiaries.

- Build strong relationships with regional management, country managers and business leaders, ensuring cybersecurity risks and priorities are understood at executive level.

- Provide pragmatic, risk-based recommendations, balancing business objectives, operational constraints and security requirements.

- Lead and coordinate security initiatives across multiple countries and subsidiaries, working through influence and matrix management.

- Coordinate the regional response to major cybersecurity incidents and crisis situations.

- Manage ISO 27001 and other Information Security certification processes, as well as security audits and remediation plans.

- Ensure compliance with internal security policies and external legal, contractual and regulatory requirements.

- Support the development and implementation of security policies, procedures, awareness programmes and risk management processes.

- Oversee Information Security throughout the IT service lifecycle, including Security Operations, Security Architecture and Security Assurance.

- Harmonise security practices across the different entities, including in the context of M&A.;





- Develop and lead a high-performing Information Security team and promote continuous improvement and professional development.

¿A quién buscamos (H/M/D)?

- Engineering degree with 6-10 years of experience in IT Management positions.

- Excellent understanding of Information Security and risk management best practices, including ISO/IEC 27001.

- Strong understanding of project management methodologies, such as PMI, Prince2 and Agile. Relevant certifications are a strong plus.

- Good practical knowledge of security technologies, including Firewalls, IDS/IPS, IAM, SIEM, remote working and cloud technologies.

- Certifications such as CISM, CISSP, CISA or ISO 27001 Lead Implementer are highly desirable.

- Strong communication, presentation and stakeholder management skills, with the ability to influence and represent security topics with senior leadership.

- Proactive, autonomous and self-starting, with the ability to lead and drive organisational change.

- Strong relationship-building skills and ability to influence internal and external stakeholders.

- Fluent English and experience working in an international and multicultural environment.

- Fluent in French.

¿Cuáles son tus beneficios?

A senior, high-impact cybersecurity leadership role with regional responsibility across multiple countries and subsidiaries.

- The opportunity to work closely with C-level and Group security leadership, influencing strategic cybersecurity and risk decisions.

-

- A broad international scope, covering governance, risk, compliance, incident response, security operations and M&A; integration.

-

- Barcelona-based position with up to 10% international travel.

📌 CISO (Hybrid in Barcelona)
🏢 Michael Page
📍 Barcelona