Job&Talent; is looking for a Chief Information Security Officer (CISO) to own and lead the company's global information security strategy, organization, and execution. Reporting directly to the CTO, the CISO will be responsible for protecting Job&Talent;'s technology, infrastructure, products, corporate environment, and data while enabling the company to move quickly and safely. Job&Talent; operates a large-scale technology product supporting critical workforce processes, including hiring, worker management, clocking, payroll-related workflows, and increasingly AI-powered capabilities. This creates a broad security surface spanning cloud infrastructure, SaaS, endpoints, identity, product security, sensitive personal data, AI systems, third-party vendors, and multiple regulatory environments. Own and continuously evolve Job&Talent;'s global information security strategy and roadmap, ensuring security investment is aligned with the company's actual risk profile and business priorities. Build a security organization capable of supporting a fast-moving global technology company without creating unnecessary friction for Engineering or the business. Own the security lifecycle across Job&Talent;'s products and engineering organization, including threat modelling, architecture reviews, secure development, application and supply-chain security, vulnerability management and security testing. Own security architecture across cloud infrastructure and platform environments, ensuring security is embedded into architecture and technology decisions from the beginning. Identity, Corporate & Data Security Own security across Job&Talent;'s corporate technology environment, including identity and access management, privileged access, endpoint and SaaS security, and corporate network security.



Own the technical controls required to protect sensitive data throughout its lifecycle, including data access, encryption, monitoring, and data-loss prevention. Partner closely with Legal, Privacy, and the DPO on applicable privacy requirements while maintaining a clear distinction between privacy governance and technical security ownership. Own security monitoring, detection engineering, incident response and threat intelligence capabilities. Maintain clear ownership, remediation, and risk acceptance while automating compliance and control monitoring wherever practical. Address emerging risks related to data access, AI agents, authentication and authorization, data exfiltration, model and provider risk, and shadow AI. Partner with Legal and Privacy on regulatory requirements, including the EU AI Act, while maintaining ownership of the required technical security controls. Build a strong security culture across Job&Talent;, embedding security into how Engineering, Product, IT, and business teams make decisions. 10+ years of experience in information security, with significant experience within global software technology product companies. ~5+ years in significant security leadership roles within technology, SaaS, marketplace, fintech, HR-tech or similarly data-intensive product environments. ~2+ years as a CISO, VP Security or equivalent senior security leader within a integral SaaS or software technology product company.



~ Experience leading security across both product technology and corporate IT environments. ~ Strong track record across Product and Application Security, cloud security and modern security architecture. ~ Deep understanding of modern identity architecture, IAM, SSO, device trust and Zero Trust principles. ~ Experience protecting significant volumes of personal or otherwise sensitive data and managing SaaS and third-party security risks. ~ Experience partnering with Engineering, Platform, SRE, IT, Legal and Privacy teams, as well as executive leadership. ~ Ability to engage deeply with architecture, infrastructure, identity, applications, cloud security and incidents, independently assessing technical risks. ~ Data-Driven Leadership: Ability to quantify security posture, establish meaningful metrics and demonstrate whether risk is increasing or decreasing. ~ Ability to move between executive-level discussions and detailed technical investigations when required. ~ Incident Leadership: Ability to make clear decisions under uncertainty and coordinate technical, business, privacy, and legal stakeholders during security incidents. ~ Organizational Leadership: Ability to build and develop effective security capabilities, determining what should be owned internally, automated, outsourced or supported by specialist expertise. Job&Talent; is a world-leading, AI-powered workforce management platform for frontline industries. We help companies boost productivity and efficiency at scale, while giving workers the tools they need to thrive. Built on deep industry expertise, cutting-edge technology, and smart AI agents, our end-to-end platform covers the entire workforce lifecycle — from recruitment

📌 Hq - Ciso - Emea Remote (Madrid)
🏢 Job Talent
📍 Madrid