Chief Information Security Officer (Ciso) Mgk-229

CISOLocation: Valencia, SpainAs our CISO, you will develop and implement comprehensive security strategies, policies, and procedures aligned with industry best practices and regulatory requirements.You will work closely with cross-functional teams to identify risks, devise preventive measures, and ensure compliance with relevant infrastructural and cybersecurity regulations.Hierarchy and InteractionReports to Group CEO, interacts with all departments at a global level.Key Responsibilities:Risk Management and Regulatory Compliance:Evaluate and mitigate cybersecurity risks.Ensure the organization complies with applicable security regulations and standards.Network and Systems Security Monitoring:Monitor IT infrastructure for threats and vulnerabilities.Implement security measures, such as firewalls, IDS/IPS, and malware detection systems.Security Planning and Strategy:Develop and update security policies and procedures.Define the organization's long-term security strategy.Security Incident Response:Coordinate and monitor the response to security incidents, such as cyberattacks or data breaches, including investigations, root cause analysis, and developing corrective actions.Minimize the impact and restore normalcy as soon as possible.Education and Awareness:Train staff in secure IT practices and raise awareness of the importance of security.Foster a culture of safety throughout the organization.Collaboration with Other Departments:Work with development, operations, and other teams to integrate security into business processes.Collaborate with the legal team on privacy and compliance issues.Promote security awareness and training activities in their area of responsibility.Responsible for ISO (9000, 14001, 20000), ISO of Security and Continuity (ISO 27001 and 22301), and ENS Audits.Customers and Supplier Approvals Homologations.Establish and maintain strong relationships with external stakeholders, such as regulatory bodies, law enforcement agencies, and industry associations.Requirements:7+ years of experience in a senior security management role.Demonstrable track record of developing and implementing security strategies and frameworks.Excellent knowledge of applicable laws, regulations, and industry standards related to infrastructure security in an organization.Knowledge and experience of the ETSI technical standards applicable to Trust Service Providers according to the eIDAS regulation.Knowledge on requirements of the National Security Scheme, ISO standards related to information security, and the NIS2 Directive are required.Certifications such as CISSP, CISM, or CRISC.Language Skills: Proficiency in English and French is required.#J-18808-Ljbffr