STRONG NETWORK. STRONG TEAM. Sovendus connects Europe’s leading brands with customers who buy. We’ve been doing it for 17 years, with one clear focus: turning general checkout traffic into a source of new customers and incremental revenue. More than 3,000 brands across Europe are already growing with Sovendus through long-term partnerships and real European transaction data. That’s how growth becomes predictable. And scalable. ? Now, we're looking for an Information Security Manager based in Spain who wants to take ownership of security initiatives, strengthen trust with our partners, and help shape the future of security and compliance at Sovendus. ? As an Information Security Manager, you will:
• Maintain and enhance our security documentation and Information Security Management System (ISMS), helping build a strong trust framework for partners and customers.
• Manage partner security assessments and questionnaires, creating reusable documentation and standardized responses.
• Drive the vulnerability management lifecycle, coordinating remediation efforts and security reporting across teams.
• Review our AWS environment, identify security improvement opportunities, and advise on cloud security best practices, including IAM, logging, network security, and encryption.
• Act as the go-to security contact for Engineering and Corporate IT, supporting secure design, threat modeling, identity management, endpoint security, and SaaS security.
• Coordinate penetration tests with our external security partners, support GDPR and data protection initiatives, and contribute to future ISO 27001 and/or SOC 2 certification readiness.
• As this is a newly created role, you will have the opportunity to shape security processes, drive initiatives, and take ownership of our security roadmap.

Your profile
• You have 5+ years of experience in Information Security, combining technical security expertise with security governance, risk management, and security frameworks.




• You bring a solid understanding of AWS and cloud security best practices and are comfortable working with engineering teams on topics such as IAM, logging, encryption, network security, and secure architectures.
• You have experience managing vulnerability management processes, coordinating remediation activities, and working with security tooling.
• You are familiar with ISMS frameworks and security standards, ideally including hands-on involvement in ISO 27001 and/or SOC 2 initiatives.
• You have a good understanding of GDPR and data protection concepts, with experience supporting security documentation, partner assessments, and security-related compliance requirements.
• You are confident engaging with both technical and non-technical stakeholders and translating security requirements into practical actions.
• You enjoy working autonomously, taking ownership of initiatives, and building processes in evolving environments.
• You are structured, self-organized, and comfortable driving cross-functional initiatives in an international environment, with business-fluent English. It's a plus if you have:
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or AWS Security Specialty.
• Experience with security questionnaires, audits, customer due diligence processes, or partner assessments.
• A background in Software Development, DevOps, Platform Engineering, or Corporate IT Security.
• Familiarity with identity, access, endpoint, and cloud security solutions.
• Experience supporting or leading ISO 27001, SOC 2, or similar certification initiatives.
• German language skills. ? Why Sovendus? Because trust matters. You'll be part of an international, fast-growing company that values ownership, collaboration, and continuous improvement. Your work will play a key role in strengthening our security posture, building trust with customers and partners, and supporting the sustainable growth of our business across Europe. ? Please note: This is a remote role, but we are only considering candidates who are already based in Spain and have valid work authorization

📌 Information Security Manager (España)
🏢 Sovendus
📍 España