CyberSecurity Specialist

The Role

The Cybersecurity Specialist protects and enhances K2’s global security posture across infrastructure, cloud platforms, endpoints, and data environments. This role ensures robust technical controls, continuous vulnerability management, and strict alignment with international security and privacy frameworks. By proactively mitigating threats and maintaining compliance, the position safeguards business continuity, intellectual property, and client trust across all operating regions.

Tasks and Responsibilities

Security Governance & Framework Compliance

- Maintain and refine general cybersecurity policies, procedural documentation, and technical controls aligned with ISO 27001, ISO 27701, ISO 42001, SOC 2, and Cyber Essentials Plus standards.

- Coordinate Data Subject Requests (DSRs) and compliance workflows in accordance with GDPR and global data privacy regulations.

Endpoint & Infrastructure Security

- Manage and monitor endpoint detection and response (EDR) platforms, antivirus solutions, and email filtering systems to protect against malicious activity.

- Oversee Mobile Device Management (MDM) solutions and enforce patch management and security update cycles across company devices.

Vulnerability Management & Incident Response

- Coordinate internal and external penetration testing initiatives, identifying system vulnerabilities and tracking remediation actions through to resolution.

- Monitor security events, participate in technical incident response activities, and deliver post-incident root cause analyses to mitigate future risks.

Security Awareness & AI-Driven Automation

- Plan and execute company-wide phishing simulation campaigns and security awareness training to cultivate a security-conscious organization.

- Deploy AI-driven security tools and scripting automation (e.g., Python, PowerShell, or low-code platforms) to accelerate alert triage, routine audits,



and repetitive compliance checks.

What Success Looks Like

- Sustains continuous audit readiness and achieves zero critical non-conformities across external ISO 27001, ISO 27701, ISO 42001, SOC 2, and Cyber Essentials Plus assessments.

- Maintains target compliance rates across all enrolled MDM devices, ensuring automated antivirus/EDR deployment, active monitoring, and timely patching cycles.

- Successfully manages internal and external penetration testing schedules and ensures identified technical vulnerabilities are resolved within agreed SLA windows.

- Minimizes mean time to detect (MTTD) and mean time to respond (MTTR) across security events, executing thorough root-cause investigations to prevent reoccurrence.

- Supports the delivery of accurate, timely resolution of Data Subject Requests (DSRs) within statutory GDPR timeframes and company data protection guidelines.

- Drives measurable quarter-over-quarter reductions in employee phishing test failure rates and maintains high organizational completion rates for mandatory security awareness training.

- Implements AI-augmented security tools and automation scripts (e.g., Python, PowerShell) to eliminate repetitive monitoring tasks and accelerate routine compliance auditing.

- Establishes collaborative working partnerships with IT, Legal/Compliance, and external security vendors to execute security improvements without disrupting business operations.

Skills & Experience

- Proven experience in technical cybersecurity operations, vulnerability management,



and incident response in cloud and hybrid enterprise environments.

- Practical understanding of information security frameworks including ISO 27001, SOC 2, Cyber Essentials, and GDPR data protection principles.

- Hands-on capability administering MDM platforms, EDR/antivirus tools, email security gateways, and vulnerability scanning solutions.

- Familiarity with scripting languages (Python, PowerShell) or AI-augmented automation tools for security workflows.

- Effective analytical problem-solving abilities and clear cross-functional stakeholder communication.

- Proficient in English with clear written and verbal communication skills.

Salary range: 45-55K EUR/year

#LI-AP1

#LI-hybrid

Additional Information

This job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities at any time.

K2 Partnering Solutions is an equal employment opportunity/affirmative action employer. We do not discriminate on the basis of an individual’s actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth and pregnancy-related conditions), gender identity or expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, genetic information, or any other characteristic protected by applicable federal, state, or local laws. Our team is dedicated to this policy with respect to all terms and conditions of employment, including recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, employee activities, access to facilities and programs, and general treatment during employment.

.

📌 CyberSecurity Specialist (Madrid)
🏢 K2 Partnering Solutions
📍 Madrid