Seguridad jobs in SpainImmediate start

Overview In this senior leadership role, you enable secure Data & AI evolution within the CDAIO division, strengthening cyber resilience and protecting critical data assets. You’ll align cyber strategy with Group governance and regulatory expectations while partnering with risk, legal, compliance, and technology teams. You act as a trusted advisor to executives on cyber risk, security investments, and posture, shaping secure innovation across the division. The opportunity combines cutting-edge AI topics with governance and risk management in a top bank. Compensaciones / Beneficios • hybrid working model, • Santander Open Academy access, • BeHealthy wellness programme, • childcare support, • Santander Contigo advisory services, • gym/WellHub membership Responsabilidades, • Support Data & AI strategic objectives by enabling secure innovation and managing cyber risk, • Advise senior leadership on cyber risk, resilience, and security investments, • Oversee cybersecurity governance, risk oversight, and regulatory reporting, • Collaborate with Risk, Compliance, Legal, Audit, Privacy, Technology, and Business stakeholders, • Implement security controls, standards, and security-by-design for Data & AI initiatives, • Monitor emerging cyber threats and define mitigation strategies, • Support audits, regulatory reviews, and remediation activities, • Ensure AI deployments follow group governance and regulatory expectations Requisitos principales, • Significant experience in senior cybersecurity, technology risk, or governance leadership, • Experience in large, complex, and regulated environments, • Degree in Engineering, Computer Science, Information Security, Business Administration, or related discipline, • CISSP, CISM, CISA, CRISC, CCSP, or equivalent certification (preferred), • Languages: English, • Strong knowledge of ISO 27001, NIST, COBIT; cloud security and regulatory compliance, • Knowledge of Data & AI ecosystems, analytics, ML, data platforms, emerging AI tech, • Awareness of evolving cyber threats and trends, • Strong strategic thinking and decision-making, • Excellent communication and stakeholder management; leadership and people management, • High integrity, resilience, risk-based mindset, • Strategic thinking, • Executive communication, • Stakeholder management, • Cybersecurity frameworks (ISO 27001, NIST, COBIT), • Cyber risk management and governance, • Cloud security and regulatory compliance

Overview En este puesto te incorporarás para gestionar el ciclo de vida de productos de ciberdefensa, traducir requisitos de seguridad en evidencias verificables y coordinar equipos para pruebas. Colaborarás con clientes internos y externos para asegurar que el producto cumple normativa y operatividad. Trabajarás en un entorno multidisciplinar con foco en mejora continua y cumplimiento, aportando impacto en la seguridad de productos críticos. Buscamos a alguien proactivo que contribuya a escalar soluciones y a gestionar acreditaciones clave. Compensaciones / Beneficios • igualdad de oportunidades, • entorno de trabajo inclusivo, • Plan de Igualdad Responsabilidades, • Gestionar el ciclo de vida de productos de ciberdefensa, • Convertir requisitos de seguridad en evidencias verificables: planes de seguridad, matrices de trazabilidad, justificaciones de cumplimiento, • Coordinar a los equipos técnicos para conseguir las pruebas, • Interactuar con clientes internos y externos, • Garantizar que el producto cumple requisitos operativos y normativos Requisitos principales, • 4-6 años en ciberseguridad o ingeniería de seguridad, • 2+ en sistemas críticos, • Haber preparado al menos 2 expedientes de acreditación o data packs completos, • Dominio de trazabilidad de requisitos (herramientas tipo DOORS/Jira), • Capacidad de comunicación con stakeholders técnicos y no técnicos, • Inglés C1 con redacción técnica formal, • Actitud proactiva y orientación a la mejora continua, • Capacidad para trabajar de forma colaborativa en equipos multidisciplinares, • Buenas habilidades de comunicación con perfiles técnicos y no técnicos, • CISSP o ISO 27001 Lead Implementer, • Base como desarrollador o arquitecto de software (entender lo que audita), • Conocer procesos de acreditación ESA/SpaceRISE

En esta posición te unes a la unidad de proyectos Cyber IAM para liderar despliegues e integraciones en SailPoint ISC.Trabajarás en definir procesos y diseñar soluciones, participando en la integración de aplicaciones y en desarrollos evolutivos.Colaborarás con un equipo IAM altamente especiali

Senior JBoss / Java Security Remediation Engineer Senior JBoss / Java Security Remediation Engineer ¿Tienes experiencia en Java, JBoss y ciberseguridad y te interesa trabajar en proyectos de alto impacto dentro del sector bancario? Buscamos incorporar un/a Senior JBoss / Java Security Remediati

Security Orchestration Automation Te imaginas participando en la transformación de las principales organizaciones nacionales e internacionales? En Deloitte estamos comprometidos con generar un impacto en la sociedad, en nuestros clientes y en ti.Buscamos perfiles con experiencia en desarrollo cu

Overview En este puesto te incorporarás para gestionar el ciclo de vida de productos de ciberdefensa, traducir requisitos de seguridad en evidencias verificables y coordinar equipos para pruebas. Colaborarás con clientes internos y externos para asegurar que el producto cumple normativa y operatividad. Trabajarás en un entorno multidisciplinar con foco en mejora continua y cumplimiento, aportando impacto en la seguridad de productos críticos. Buscamos a alguien proactivo que contribuya a escalar soluciones y a gestionar acreditaciones clave. Compensaciones / Beneficios • igualdad de oportunidades, • entorno de trabajo inclusivo, • Plan de Igualdad Responsabilidades, • Gestionar el ciclo de vida de productos de ciberdefensa, • Convertir requisitos de seguridad en evidencias verificables: planes de seguridad, matrices de trazabilidad, justificaciones de cumplimiento, • Coordinar a los equipos técnicos para conseguir las pruebas, • Interactuar con clientes internos y externos, • Garantizar que el producto cumple requisitos operativos y normativos Requisitos principales, • 4-6 años en ciberseguridad o ingeniería de seguridad, • 2+ en sistemas críticos, • Haber preparado al menos 2 expedientes de acreditación o data packs completos, • Dominio de trazabilidad de requisitos (herramientas tipo DOORS/Jira), • Capacidad de comunicación con stakeholders técnicos y no técnicos, • Inglés C1 con redacción técnica formal, • Actitud proactiva y orientación a la mejora continua, • Capacidad para trabajar de forma colaborativa en equipos multidisciplinares, • Buenas habilidades de comunicación con perfiles técnicos y no técnicos, • CISSP o ISO 27001 Lead Implementer, • Base como desarrollador o arquitecto de software (entender lo que audita), • Conocer procesos de acreditación ESA/SpaceRISE

In this senior leadership role, you enable secure Data & AI evolution within the CDAIO division, strengthening cyber resilience and protecting critical data assets.You’ll align cyber strategy with Group governance and regulatory expectations while partnering with risk, legal, compliance, and techn

Overview In this role you will own end-to-end security for Airbus’s Spanish Space Domain, designing secure systems and defending assets from blueprint to active operations. You will bridge architecture with hands-on defense, guiding mission-critical security efforts across aerospace projects, including ambitious initiatives up to Mars. You will influence security standards and hardening while coordinating with engineering teams to stay ahead of threats in a defense-in-depth environment. Compensaciones / Beneficios • Vacation days and additional days off (+35 days total), • Attractive salary and compensation package, • Hybrid working model, • Collective transport service at some sites, • Health insurance, • Employee stock options and retirement plan or study grants Responsabilidades, • Architect secure systems and perform compliance checks and risk assessments for space-based assets, • Consult with internal customers to align cyber security standards with project goals, including long-horizon missions, • Create hardening guidelines and own product security standards, • Lead operational defense by managing security technologies (e.g., EDR), driving vulnerability management, and handling firewall and access control ticketing Requisitos principales, • Wide cyber security toolkit from design to operational defense, • Experience with vulnerability management and endpoint protection, • Ability to translate complex security requirements into practical hardening guidelines, • Broad IT knowledge to develop security architectures and identify weaknesses, • Proactive mindset to design solutions, not just identify problems, • CISSP or similar certification is an advantage, • Basic knowledge of conducting audits is an advantage, • Excellent communication to partner with engineering teams, • Openness to new technological developments, • Excellent communication, • Proactive mindset, • Openness to new technologies, • Vulnerability management, • Endpoint protection (EDR), • Security architecture design

Busco una persona de confianza para cuidar a mis hijos después de la escuela.La tarea incluye recogerlos en la escuela, ayudar con tareas escolares simples, merienda y asegurar un ambiente seguro hasta que llegue un adulto.Preferible experiencia con niños de 5 a 10 años, paciencia, energía y bue

Hola, estoy buscando una persona de confianza para supervisar y apoyar a mi hijo/a después de la escuela durante las semanas escolares.Necesito alguien que pueda recogerlo/a en la escuela, ayudar con la tarea, merienda y organizar actividades seguras hasta que llegue un adulto.La familia valora la

Busco a alguien responsable y cariñoso para cuidado puntual de mis dos hijos, de 4 y 7 años.Ocurrirá principalmente por la tarde/noche para asistir a salidas escolares, actividades extraescolares o imprevistos.La persona debe saber gestionar rutinas básicas, comer juntos, ayudar con deberes simp

Busco una persona de confianza para cuidado puntual de mi hijo/a de 4 años.Necesito alguien que pueda atenderlo en casa durante unas 3-4 horas, desde la tarde, para actividades lúdicas y supervisión.Es importante que tenga experiencia con niños pequeños y una actitud tranquila.Preferible dispon

Si es posible, podría quedarme con un breve repaso de seguridad para evitar accidentes.

Necesito una persona responsable para recoger a mis hijos de la escuela, ayudar con tareas y supervisión ligera hasta que yo llegue a casa. La intervención sería de lunes a jueves, aproximadamente 2 horas por día, con posibilidad de ampliar algunos días.

Busco una persona responsable para cuidar a mi hijo(a) después de la escuela en casa o en un punto seguro cercano. El/la cuidador(a) debe entretener, ayudar con deberes ligeros y supervisar en actividades seguras. Se valora experiencia previa con niños de 6-10 años, paciencia y prohibición de pa

El/la niñero/a se encargaría de la merienda, ayudar con deberes ligeros, juegos educativos y garantizar la seguridad. Busco una persona de confianza para cuidado puntual de mi hijo de 5 años. Ofrezco flexibilidad de horario y una pequeña compensación por hora.

Busco una persona de confianza para cuidado périscolar de mis dos hijos.Las tareas principales son recogerlos de la escuela, ayudar con la merienda, supervisar deberes simples y actividades tranquilas hasta que yo llegue a casa.Idealmente alguien con experiencia en primeros auxilios básicos y buen

Overview En GFT, como AI Security & Risk Consultant, evaluarás riesgos de seguridad en soluciones de IA y propondrás mitigaciones. Diseñarás defensas ante ataques adversariales y auditarás modelos ML/LLM para sesgos, privacidad y vulnerabilidades. Definirás marcos de gobernanza de IA alineados con buenas prácticas y normativa, y colaborarás con equipos de desarrollo para securizar pipelines MLOps y despliegues de IA. Esta función te sitúa en un entorno internacional, donde impactas la seguridad y la fiabilidad de soluciones IA a escala en sectores regulados. Buscamos a alguien proactivo, orientado a resultados y capaz de impulsar mejoras continuas. Compensaciones / Beneficios • igualdad de oportunidades, • plan de igualdad, • ambiente de trabajo inclusivo, • equilibrio trabajo-vida, • oportunidad de un equipo global, • formación y desarrollo continuo Responsabilidades, • Evaluar riesgos de seguridad en soluciones de IA y proponer mitigaciones, • Diseñar defensas frente a ataques adversariales (prompt injection, data poisoning, model theft), • Auditar modelos ML/LLM para identificar vulnerabilidades, sesgos y riesgos de privacidad, • Definir marcos de gobernanza AI alineados con buenas prácticas y regulación aplicable, • Colaborar con equipos de desarrollo para securizar pipelines MLOps y despliegues de IA Requisitos principales, • Experiencia en ML/LLM security y adversarial ML, • Conocimiento de OWASP Top 10 for LLM y técnicas de AI red teaming, • Experiencia con TensorFlow o PyTorch, • Conocimientos de privacidad diferencial, explainability y fairness, • Nivel alto de inglés en entorno internacional, • Actitud proactiva, • Capacidad para trabajar en equipos multidisciplinares, • Buenas habilidades de comunicación con perfiles técnicos y no técnicos, • ML/LLM security y adversarial ML, • OWASP Top 10 for LLM, • AI red teaming

Quieres trabajar en las mejores empresas, nacionales e internacionales, como experto/a en Ciberseguridad? Desde EIP International Business School, buscamos jóvenes talentos con gran potencial para impulsar su carrera en uno de los sectores con mayor demanda profesional.

Tarlogic, líder en ciberseguridad con presencia internacional, ofrece un puesto de Red Team Operator para trabajar de forma remota y con opción a oficinas en Madrid o Santiago de Compostela. Se valora experiencia en security ofensiva, explotación de vulnerabilidades y proyectos de alto nivel técnico. El equipo se centra en servicios avanzados de seguridad ofensiva para clientes y en investigación de nuevas técnicas. Se busca proactividad, autonomía y capacidad para resolver problemas complejos. #J-18808-Ljbffr

Wilson & Sterling Consulting is seeking Identity & Access Management engineers in Madrid. The role involves tackling complex authentication and authorisation challenges and designing innovative cybersecurity solutions. Candidates should possess a strong background in IT security, hands-on expertise in engineering, and familiarity with OIDC and OAuth protocols. A degree in computer science is required. This opportunity involves working on risk mitigation across cross-functional teams. #J-18808-Ljbffr

Cyber Security Governance Specialist## Overview## Job descriptionAre you looking for a new challenge?Fancy helping us shape the future of motor insurance?Prima could be the place for you.Since 2015, we’ve been using our love of data and tech to rethink motor insurance and bring drivers a great experience at a great price. Our story began in Italy, where we’ve quickly become the number one online motor insurance provider. In fact, we’re trusted by over 5 million drivers. And now we’re expanding to help millions more drivers in the UK and Spain.To help fuel that growth, we need a Cyber Security Governance Specialist to join our Security Team.The Engineering Department is the beating heart of Prima. You’ll be joining over 350 engineers across software development, infrastructure, operations and security: fueled by curiosity, experimentation and collaboration, you’ll help deliver scalable, impactful solutions that shape the future of insurance.Excited to make an impact? Here are the detailsWhat you'll do:- Contribute to the definition, implementation, and continuous improvement of the cybersecurity governance framework, including policies, procedures, and controls aligned with international standards and regulatory requirements (e.g. ISO/IEC 27001, NIST CSF, COBIT, GDPR, DORA)- Support Business Continuity Management (BCM) and IT Disaster Recovery (DR) activities, contributing to Business Impact Analyses (BIA) activities, critical asset dependency mapping, the definition and maintenance of Recovery Time and Recovery Point Objectives (RTOs/RPOs) and participation in business continuity and IT Disaster Recovery tests and exercises (e.g. tabletop simulations)- Perform security audits, gap analyses, and cyber risk assessments, identifying remediation actions and supporting their execution with relevant stakeholders- Participate in third-partyand resilience assessments, as well as security assessments of emerging technologies, includingArtificial Intelligence (AI) solutions- Support cybersecurity awareness initiatives, training programs, and onboarding activities related to security topicsWhat we're looking for:- 2+ years of experience in cybersecurity governance, risk, compliance, or security assurance roles, preferably in regulated and technology-driven environments.- Familiarity with Business Continuity Management (BCM) and IT Disaster Recovery (DR) concepts, including participation in Business Impact Analyses (BIA), critical asset dependency mapping, definition of RTOs and RPOs and Disaster Recovery tests or exercises- Familiarity with Artificial Intelligence (AI) technologies and their associated governance, risk, compliance, and security considerations, including the assessment and oversight of AI-enabled systems- Proven knowledge of major cybersecurity frameworks (e.g., ISO/IEC 27001, NIST CSF) and regulatory landscapes (GDPR, DORA)- Strong English communication skills, with the ability to collaborate effectively with multidisciplinary teamsNice-to-have:- Certifications such as CISSP, CISM, CRISC, ISO/IEC-27001 Lead Implementer/Lead Auditor, ISO 22301- Exposure to Business Continuity Management and recovery planning- Experience supporting regulatory compliance for new digital operational resilience standards (e.g., DORA);Why you’ll love it here Work Your Way: Enjoy full flexibility – work from home, the office or a mix of both. Plus, work from anywhere for up to 30 days a year. This is a full remote position and we're considering candidates located in Italy, Spain or UK. Grow with us: We may move fast at Prima, but we move together. Get access to learning resources, mentorship and a growth plan tailored to you. Thrive and perform: Your best work begins when you feel your best. Enjoy private healthcare, gym discounts, wellbeing programs and mental health support.Think you’re a match? Apply now.At Prima, we celebrate uniqueness. If you don’t meet every requirement but are passionate about this role, we still want to hear from you. Innovation thrives on diverse perspectives.Prima is proud to be an equal opportunity employer. Need accommodations during the process? Email us at accessible.recruiting@prima.it. Let’s build the future of insurance, together. #J-18808-Ljbffr

Madrid Job ID: 78322 Division: Liebherr International Company: Work area: Information technology / Software Country: ES Entry level: Professionals Type of contract: full time Responsible for the delivery of the governance product and services: governance service: design, implementation and continuous improvement of the global Information Security Framework (ISF), aligning it with the evolving business needs, regulatory environment, industry standards and customer requirements. Support delivery of the GRC platform service and customer security assurance service. The working location for this position will be in Madrid city, where we operate a hybrid model, requiring at least 40% of the working time on-site. • Information Security Framework (ISF) Management: Design, implement, and maintain the ISF: policies, standards, procedures, and control baselines, aligned to business needs, regulatory obligations (e.g. NIS2, GDPR), industry standards (e.g. NIST CSF, ISO 27001), and customer contractual requirements, • Regulatory Integration & Control Framework Alignment: Maintain inventory and traceability of external obligations (e.g. NIS2, GDPR, ISO/IEC 27001, IEC 62443) and customer requirements, integrating these into the ISF components (policies, controls), • Governance Operations & Executive Engagement: Oversee ISF governance processes, including stakeholder coordination, approval workflows, and documentation., • Collaborate and support the GRC platform service onwer to deliver technology required to enable digital implementation of the information security framework., • Collaborate and support the Customer Security Assurance Service owner by delivering governance which supports the business to comply with customer security requirements., • Governance Metrics & Reporting: Design key risk and performance indicators, dashboards and report on the governance product and services relevant for management at the Liebherr group, divisions and companies, • Bachlore’s/Master’s in Cybersecurity, Computer Science, or related field, • 5+ years of working experience in global organizations including Governance, GRC technology and customer security assurance services delivery, • Following certificates are preferred: CISSP, CRISC, CISM, GSLC, • Excellent written and verbal communication skills in English, German is a plus, • Proven expertise in designing and maintaining information security governance frameworks using industry standards e.g. NIST CSF, ISO/IEC 27001, IEC 62443 and requirements in security regulations e.g. NIS2, GDPR, Defense contracting, • Ability to lead multi-stakeholder governance processes across global business units and ensure documentation is structured, endorsed, and maintained, • Experience in applying agile principles (e.g. iterative planning, continuous improvement, stakeholder collaboration) to the delivery and evolution of governance services, frameworks, or organizational processes, • Experience in owning and evolving enterprise GRC platforms to support compliance, risk, and governance services, • Strategic thinking combined with a pragmatic execution mindset, especially when aligning governance with operational realities, • Highly desirable: experience in product ownership and service delivery using SAFe (Scaled Agile Framework) or similar agile methodologies At Liebherr, we believe people are at the heart of our success. As part of our international team, you’ll enjoy a secure role in a family-owned company that values innovation, collaboration, and long-term career growth: • Competitive compensation and benefits package that recognizes your expertise, • Flexible and hybrid working model, • Creative freedom and responsibility to shape processes and solutions in our global transformation, • Continuous learning and development with tailored training and certification opportunities, • Life and accident insurance, • Option to include a premium private health insurance package as part of the flexible remuneration, • A safe, stable and international workplace within a trusted family business that invests in people One Passion. Many Opportunities. Liebherr is a family-run technology company that is not only one of the largest construction machinery manufacturers in the world, but also offers high-quality, user-oriented products and services in many other areas.The Group employs nearly 50,000 people in more than 140 companies on all continents. #J-18808-Ljbffr

Hitachi Energy Spain, S.A.U. is seeking DevSecOps Engineers to join the Digital Passport System (DPS v2) team. You will design, automate and operate a global Azure cloud platform, focusing on security, networking and compliance to support manufacturing operations worldwide. You will work with architects, software developers and enterprise Cyber, IAM and Network teams to deliver a scalable, highly available cloud environment and contribute to automation, cost optimization and platform evolution. #J-18808-Ljbffr

Indramind Cybersecurity en Madrid busca un/a Arquitecto/a SIEM con al menos 4 años de experiencia en arquitectura y despliegue de infraestructuras y soluciones SIEM de ciberseguridad. Se requiere experiencia en arquitectura SIEM, Elastic y Kafka, ingesta, correlación y análisis de eventos; conocimiento de redes y seguridad, Windows y Linux; y manejo de herramientas de análisis de vulnerabilidades (Nmap, Nessus, Wireshark). Disponibilidad para viajar internacionalmente. #J-18808-Ljbffr

Accenture CyberSecurity en Madrid busca un/a Security Account Lead para el área Industry Resources, con fuerte enfoque en negocio, liderazgo ejecutivo y desarrollo de cuentas estratégicas. Actuarás como socio estratégico del cliente y punto de conexión entre negocio, tecnología y seguridad. La posición es clave para impulsar el crecimiento de Accenture Security en clientes del sector Resources, liderando la estrategia de ciberseguridad en cuentas clave y definiendo planes de account maturity y #J-18808-Ljbffr

Join Verisure’s Security Architecture & Engineering team! We are looking for a Network Security Engineer to strengthen our Security Architecture & Engineering team. In this role, you will play a key part in protecting Verisure’s global network infrastructure, shaping secure architectures, and ensuring our connectivity meets the highest security standards. If you enjoy working hands‑on with modern network security technologies while influencing strategy at scale, this role is for you. • Define and drive the roadmap and strategy for network security, • Design secure network architectures across on‑prem, hybrid, and cloud environments, • Configure, deploy, and maintain network security controls, • Ensure segmentation of critical assets and secure connectivity, • Monitor network traffic, identify threats, and support incident response, • Integrate network security controls into automation and Infrastructure as Code (IaC), • Collaborate with cross‑functional teams to identify, document, and mitigate risks, • Evaluate emerging technologies and recommend continuous improvements, • At least 3+ years of experience in network security engineering, • Strong knowledge of technologies such as firewalls, IDS/IPS, NAC, proxies, VPNs, SD‑WAN, DDoS protection, and SASE, • Solid understanding of LAN/WAN architectures, Zero Trust, and network segmentation, • Experience with automation and scripting, • Ability to work independently with strong communication and collaboration skills, • Advanced English and Spanish (spoken and written), • Degree in Computer Science, Telecommunications, or a related field, • Work in a global company with real impact, • Influence security architecture at large scale, • Collaborate with skilled professionals in a modern security environment, • Work with the latest technologies in the field., • Be part of a culture that values innovation, ownership, and continuous improvement, • Learning opportunities and career development., • Competitive benefits. At Verisure, we do something amazing every day. By protecting what matters most, we change lives for the better. We are the leading provider of professionally monitored security services with 24/7 response in Europe and Latin America. More than 6 million families and small businesses in 18 countries rely on our innovative technology to protect what matters most to them. We integrate product development, design, sales, installation services and a 24/7 professional monitoring solution. We have a track record of continuous growth, as well as exciting plans to continue expanding, transforming, and leading the market into the future. Our success depends on our people, and we invest in them every day. Working with Verisure is being part of an industry-leading, world-class company that has a strong entrepreneurial spirit. At Verisure, we are committed to fostering a diverse and inclusive workplace, recognising that diversity of thought and background only makes our teams stronger and more innovative. We reject all forms of discrimination and bias, and we believe in access to opportunities for everyone, regardless of gender, age, disability status, race, sexual orientation, or any other status. #J-18808-Ljbffr

Verisure is seeking an embedded software engineer to join our Madrid or Malmö team, focusing on the Linux-based Central Unit that powers our monitored security system. You will work on Wi-Fi/modem connectivity, data persistence, security, and system services across real-world IoT deployments. You will collaborate with cross-site teams in Madrid and Malmö in an agile environment, gradually taking ownership of complex connectivity areas while delivering reliable, field-tested software. #J-18808-Ljbffr

HappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don't just communicate through voice and email - they make decisions, take action, and run operations autonomously across entire enterprise systems. Born in Y Combinator (S23) and backed by a16z, Base10, Prysm Capital and Eurazeo with over $150M raised, we power critical operations for global enterprises worldwide. Our platform is battle-tested in the most demanding environments, where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Learn more about our vision in our manifesto. We are looking for a Cloud Security Engineer to join our team. You will be the single accountable owner for cloud security posture across AWS, Azure, and GCP — bringing the technical depth and operational discipline to keep our infrastructure hardened, our findings remediated on SLA, and our security baseline consistent across every environment we run. This is not a governance or advisory role. Your deepest strength is the ability to own outcomes end-to-end: triaging Wiz findings by real-world exploitability, shipping policy-as-code gates that catch misconfigurations before they hit production, and getting remediation done by engineering teams you don't manage. That said, you operate with a platform mindset — building guardrails that scale rather than manually reviewing every change. What You'll Do Cloud Posture Management Own the CNAPP end-to-end. Triage Wiz findings by exploitability and business impact, drive remediation across engineering teams to SLA and keep the backlog from accumulating. Be the person who actually gets findings closed, not just reported. IaC Security Design and ship policy-as-code gates in the Terraform pipeline that block misconfigurations at PR and plan time, before they reach production. Use OPA/Rego, Checkov, tfsec, or equivalent — and calibrate gates to stop bad patterns without creating friction that causes teams to route around them. Multi-Cloud Baseline Define, document, and enforce a consistent security baseline across AWS, Azure, and GCP — covering IAM, networking, KMS/encryption, and logging. Own the documentation that supports enterprise customer security reviews and audit evidence requests. Kubernetes & Container Security Harden clusters, images, and admission paths across EKS, AKS, and GKE. Set and enforce RBAC policies, admission controls, and image scanning standards. Remediation Leadership Drive fixes through engineering teams you don't have direct authority over. Track SLAs, communicate risk clearly to technical and non-technical stakeholders, and elevate when needed — without creating noise. Shift-Left Guardrails Grow the share of cloud infrastructure managed via Terraform with active security checks, quarter over quarter. Trend new critical misconfigurations reaching production to zero. Must Have 4–6 years in cloud security or platform/infrastructure security. Expert depth in at least one major cloud provider (AWS, Azure, or GCP): IAM, networking, KMS/encryption, and logging. Hands-on experience with a CNAPP/CSPM — Wiz strongly preferred — including triage, prioritization, and driving remediation with engineering teams. Terraform in production plus policy-as-code experience (OPA/Rego, Checkov, tfsec, or similar) integrated in CI/CD. Kubernetes security fundamentals: RBAC, admission control, and image scanning. Scripting proficiency in Python or Go. English B2+ (professional working proficiency). Nice to Have Working experience across 2+ cloud providers — we deploy on AWS, Azure, and GCP. Cross-cloud and Kubernetes certifications: CCSK, CKA, CKS, AWS Security Specialty, or equivalent. EKS/AKS/GKE hardening and container runtime security experience. TypeScript or Go beyond scripting. SIEM/detection exposure — we run RunReveal. SOC 2 / ISO 27001 cloud control evidence experience. Join a world-class team of engineers and builders. Backed by top investors including a16z, Y Combinator, Base10, Prysm Capital and Eurazeo. Have ownership and autonomy of projects and are encouraged to ship. Comprehensive Benefits including healthcare, dental, vision coverage. Competitive salary + equity in a high-growth startup. Extreme Ownership We take full responsibility for our work and outcomes. No excuses, no blame-shifting. If something needs fixing, we own it. Craftsmanship We sweat the details because details compound. We never settle for "just fine" — whether it's a scoping document, a prototype demo, or a customer conversation. We are "Majos" Be a good human. Friendly, genuine, kind. We're building something ambitious and it's better when we enjoy it together. Urgency with Focus Move fast, but in the right direction. Prioritize ruthlessly. Act decisively. Aim for the highest leverage action. Talent Density and Meritocracy Every hire raises the bar. Ability over seniority. Ownership goes to those who earn it. First-Principles Thinking Strip problems to their fundamentals, ignore industry dogma, and rebuild from scratch when needed. It's how we build what others think is impossible. The personal data provided in your application and during the selection process will be processed by Happyrobot, Inc., acting as Data Controller. By sending us your CV, you consent to the processing of your personal data for the purpose of evaluating and selecting you as a candidate for the position. Your personal data will be treated confidentially and will only be used for the recruitment process of the selected job offer. In relation to the period of conservation of your personal data, these will be eliminated after three months of inactivity in compliance with the GDPR and legislation on the protection of personal data. If you wish to exercise your rights of access, rectification, deletion, portability or opposition in relation to your personal data, you can do so through security@happyrobot.ai subject to the GDPR. For more information, visit https://www.happyrobot.ai/privacy-policy By submitting your request, you confirm that you have read and understood this clause and that you agree to the processing of your personal data as described. #J-18808-Ljbffr

En Accenture CyberSecurity, ayudamos a las organizaciones líderes de la industria a anticiparse, protegerse y responder a los riesgos de ciberseguridad en un entorno cada vez más complejo. Buscamos un/a Security Account Lead para el área de Industry Resources, con un fuerte enfoque en negocio, liderazgo ejecutivo y desarrollo de cuentas estratégicas. Esta posición es clave para impulsar el crecimiento de Accenture Security en clientes del sector Resources, actuando como socio estratégico del cliente y punto de conexión entre negocio, tecnología y seguridad. • Liderar la estrategia de ciberseguridad en cuentas clave del sector Resources, alineando las necesidades del cliente con el portfolio de Accenture CyberSecurity en midmarket., • Actuar como trusted advisor a nivel C-Level (CISO, CIO, CTO, CEO), estableciendo relaciones de largo plazo., • Identificar, desarrollar y cerrar oportunidades comerciales de alto valor en servicios de seguridad (consultoría, managed services, tecnología)., • Coordinar equipos multidisciplinares (Security, Technology, Strategy, Industry) para asegurar una propuesta de valor integral., • Definir y ejecutar el account plan de seguridad, asegurando crecimiento sostenible y rentabilidad., • Supervisar la correcta entrega de proyectos, garantizando calidad, cumplimiento y satisfacción del cliente., • Mantener un profundo conocimiento de las tendencias de ciberseguridad, regulaciones y riesgos específicos del sector resources / Chemical and Natural Resources., • Contribuir al posicionamiento de Accenture como referente en seguridad mediante thought leadership y participación en iniciativas estratégicas., • Más de 10–12 años de experiencia en ciberseguridad, consultoría tecnológica o servicios profesionales., • Experiencia demostrable en gestión de grandes cuentas y desarrollo de negocio en entornos complejos., • Conocimiento sólido del sector Resources / Chemical and Natural Resources, incluyendo sus retos regulatorios y operativos., • Trayectoria trabajando con stakeholders ejecutivos y toma de decisiones a nivel estratégico. #J-18808-Ljbffr

Capitole is seeking a Technical Architect with 10+ years of experience to govern IT architecture across strategic local and group programmes in a hybrid Madrid environment. You will lead Design Authority governance, define API/SOA paradigms, and ensure security, data, and cloud alignment with enterprise standards. Key focus areas include Cloud Transformation, AI & Agentic, API Management, IT Security and Workplace, plus multi-regional infrastructures. #J-18808-Ljbffr

SIRT busca incorporar un/a Ingeniero/a de Redes y Seguridad N2 en Madrid. Este rol combina la ejecución técnica y la coordinación operativa del servicio. Se requiere más de 4 años de experiencia en redes y seguridad, habilidades en gestión de firewalls y manejo de herramientas como Cisco y Fortinet. La posición es híbrida, combinando trabajo presencial y teletrabajo, y se ofrece un salario según experiencia. #J-18808-Ljbffr

Consultor/a de Preventa en Ciberseguridad. TELETRABAJO. (11373) 14/07/2026 Desde Novanotio buscamos incorporar un/a Consultor/a de Preventa en Ciberseguridad, con especialización en seguridad de aplicaciones, APIs y servicios expuestos a Internet, para uno de nuestros principales clientes. La persona seleccionada trabajará en un entorno multidisciplinar, colaborando con los equipos de producto, ventas, preventa y marketing para apoyar el posicionamiento y la comercialización de soluciones de ciberseguridad. • Apoyar al equipo de producto en el posicionamiento y la evolución de soluciones de seguridad de aplicaciones., • Elaborar materiales técnico-comerciales como presentaciones, argumentarios, brochures, FAQs, casos de uso y documentación de apoyo a ventas., • Crear contenidos para campañas, workshops, propuestas comerciales, sesiones internas y reuniones con clientes., • Transformar capacidades técnicas en mensajes claros, comerciales y orientados a negocio., • Dar soporte a oportunidades relacionadas con WAF, CDN, DNS, protección frente a ataques DDoS, gestión de bots y seguridad de APIs., • Participar en la preparación de propuestas comerciales y respuestas a procesos RFP y RFI., • Colaborar con los equipos de ventas y preventa durante las distintas fases de las oportunidades comerciales., • Coordinar acciones, materiales y contenidos con fabricantes y partners tecnológicos., • Mantener actualizados los materiales de producto y realizar seguimiento de las principales tendencias del mercado., • Conocimientos de seguridad de aplicaciones web, APIs y servicios expuestos a Internet., • Familiaridad con soluciones y tecnologías de WAF, CDN, DNS, DDoS, protección frente a bots y API Security., • Conocimientos básicos de HTTP/HTTPS, TLS, certificados digitales, autenticación y control de acceso., • Capacidad para comprender información técnica y transformarla en mensajes claros y orientados a clientes., • Excelente capacidad de redacción, síntesis y storytelling., • Manejo de herramientas como PowerPoint, Canva, Figma, Microsoft 365 o similares., • Capacidad para elaborar presentaciones y materiales técnico-comerciales visualmente atractivos., • Buenas habilidades de comunicación y capacidad para trabajar con equipos multidisciplinares., • Perfil autónomo, organizado, proactivo y con visión de producto., • Nivel alto de inglés., • Experiencia previa en posiciones de preventa, producto, product marketing o elaboración de contenidos técnico-comerciales., • Experiencia en proyectos o soluciones de ciberseguridad., • Conocimiento de fabricantes y plataformas como F5, Akamai, Cloudflare, Imperva, Radware, Fastly, AWS o Microsoft Azure., • Experiencia en la preparación de propuestas comerciales, RFP, RFI o documentación de apoyo a ventas., • Experiencia trabajando con fabricantes, distribuidores o partners tecnológicos., • Incorporación a un proyecto estratégico vinculado a soluciones de ciberseguridad y seguridad de aplicaciones., • Participación en proyectos tecnológicos innovadores y de alto impacto., • Colaboración con equipos especializados de producto, ventas, preventa y marketing., • Desarrollo profesional y seguimiento personalizado durante todo el proyecto., • Retribución flexible mediante cheque transporte, cheque guardería, seguro médico y tickets restaurante., • Modalidad de trabajo: Teletrabajo 100%. En Novanotio somos una consultora tecnológica especializada en conectar el mejor talento con proyectos innovadores en empresas líderes. Apostamos por un seguimiento cercano y personalizado, acompañando a nuestros profesionales durante todo el proceso de selección y a lo largo de su trayectoria dentro de la compañía. Nuestro objetivo es encontrar el mejor encaje entre tus expectativas profesionales, tus conocimientos y las oportunidades que ofrece el mercado tecnológico. No/Si #J-18808-Ljbffr

En Logicalis Spain buscamos a un/a Cloud Security & Identity Engineer para incorporarse en uno de nuestros clientes. La persona será responsable de diseñar, implementar y supervisar controles de seguridad en entornos cloud híbridos (Azure y GCP), con foco en la protección de cargas de trabajo, identidades y redes. Actuará como referente técnico en herramientas CSPM/CNAPP y liderará iniciativas de hardening, detección y respuesta para reducir la superficie de ataque de la organización. • Mínimo 4 años de experiencia en roles técnicos de seguridad cloud., • Experiencia demostrable en proyectos con Azure y/o GCP en entornos productivos., • Experiencia con herramientas CSPM/CNAPP en entornos empresariales., • Historial de gestión de identidades y controles IAM en entornos multi-cloud., • Evaluar y reforzar la postura de seguridad en suscripciones Azure y proyectos GCP., • Gestionar políticas de seguridad, RBAC, Conditional Access y Defender for Cloud en Azure., • Implementar y mantener Security Command Center y controles de seguridad en GCP., • Revisar configuraciones de IaaS, PaaS y contenedores para detectar desviaciones y misconfiguraciones., • Administrar y optimizar herramientas CSPM (ej. Prisma Cloud, Wiz, Defender CSPM) para visibilidad continua., • Gestionar plataformas CNAPP integrando protección de workloads en nube nativa (CWPP, KSPM, DSPM)., • Definir benchmarks de cumplimiento (CIS, NIST, ISO 27001) y automatizar remediaciones., • Coordinar con equipos de DevSecOps para integrar seguridad en pipelines CI/CD., • Diseñar y gestionar arquitecturas de identidad Zero Trust en entornos híbridos y multi-cloud., • Administrar Azure AD / Entra ID: políticas de acceso condicional, PIM, MFA y SSO., • Revisar y auditar permisos excesivos y cuentas con privilegios en cloud (CIEM)., • Implementar controles para prevención de escalada de privilegios y movimiento lateral., • Diseñar segmentación de red en entornos cloud: VNets, VPCs, NSGs, Firewall rules y Private Endpoints., • Revisar arquitecturas de conectividad híbrida (ExpressRoute, VPN, Interconnect)., • Analizar flujos de tráfico, reglas de firewall y configuración de WAF/DDoS., • Soporte en análisis forense de red e investigación de incidentes., • Realizar assessments técnicos de seguridad cloud y elaborar roadmaps de mejora., • Documentar arquitecturas de referencia, políticas y procedimientos de seguridad., • Acompañar a clientes internos/externos en proyectos de transformación cloud segura., • Participar en respuesta a incidentes y ejercicios de red team / blue team. Logicalis Spain somos un grupo internacional con más de 20 años de experiencia en el sector IT, vinculados a proyectos y servicios de gran envergadura en Data Centers, Ciberseguridad y Analytics. • Puesto de trabajo estable y contrato indefinido., • Modalidad de trabajo híbrida., • Jornada intensiva todos los viernes y verano., • Festivo el día de tu cumpleaños + día de asuntos propios., • Posibilidad de acceder a planes de retribución flexible (tarjeta restaurante, tarjeta transporte)., • Nos importa tu bienestar, tendrás acceso a Seguro Médico Privado y Wellhub (Gympass)., • Importantes descuentos en diferentes servicios y formaciones por ser empleado de Logicalis, (retail, electrónica, viajes..), • Formación y certificaciones adaptadas a tu puesto de trabajo., • Desarrollo profesional con proyectos punteros y tecnologías actuales en el mercado. #J-18808-Ljbffr

Consultor Ciberseguridad Senior (Mallorca)Applyremote type: Hybridlocations: MADRIDtime type: Full timeposted on: Posted Todayjob requisition id: JR108299We are **One Team. Presencialidad:Se requiere presencialidad en cliente (Mallorca).

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. Those in information security at PwC will focus on protecting sensitive data and systems from cyber threats through risk assessments, security audits, and implementing robust security measures. Your work will help enable the confidentiality, integrity, and availability of information assets for clients. You’ll become a member of the Network Information Security (NIS) team in Spain. NIS is the independent organization responsible for information security and cybersecurity at PwC. We enable local, regional and global security effectiveness and help remove roadblocks and barriers to our CyberReadiness Program journey. Your responsibilities may include but are not limited to: • You’ll collaborate on a Data Security Posture Management program which is part of our Zero Trust strategy, • Support, initiateand run regular cyber and data hygieneactivities mainly focused on attack surface reduction and hardening, • Stakeholder management and education, • Incident response and oversight We are looking for a candidate with ambition, open-mindedness and attitude to grow with us. #J-18808-Ljbffr

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In cybersecurity incident management at PwC, you will focus on effectively responding to, and mitigating, cyber threats, maintaining the security of client systems and data. You will be responsible for identifying, analysing, and resolving security incidents to minimise potential damage and protect against future attacks. Driven by curiosity, you are a reliable, contributing member of a team. In our fast-paced environment, you will have the chance to work on a variety of assignments, each presenting varying challenges and scope. Every experience is an opportunity to learn and grow. You are encouraged to ask questions, take initiative, and produce quality work that adds value for our clients and contributes to our team’s success. During your time at the Firm, you start to establish your personal brand, paving the way to more opportunities. Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to: • Apply a learning mindset and take ownership for your own development., • Appreciate diverse perspectives, needs, and feelings of others., • Adopt habits to sustain high performance and develop your potential., • Actively listen, ask questions to check understanding, and clearly express ideas., • Seek, reflect, act on, and give feedback., • Gather information from a range of sources to analyse facts and discern patterns., • Commit to understanding how the business works and building commercial awareness., • Learn and apply professional and technical standards (e.g. refer to specific PwC tax and audit guidance), uphold the Firm's code of conduct and independence requirements. #J-18808-Ljbffr

AXA Group Operations ha abierto un proceso de selección para incorporar un Information Security Expert en sus oficinas de Madrid, una posición estratégica desde la que impulsará la definición e implementación de la estrategia global de seguridad de la información del grupo. El profesional se integrará en la división Group Security, responsable de establecer los estándares de seguridad que aplican las diferentes entidades de AXA a nivel internacional, supervisar la postura global de ciberseguridad y ofrecer servicios centralizados como la gestión de crisis o el Security Operations Center (SOC). Esta comunidad está formada por cerca de 1.000 profesionales de seguridad que trabajan para proteger a los clientes, las operaciones, la marca y las personas de la compañía. Entre sus principales responsabilidades estarán coordinar las actividades del equipo de Information Security, garantizar el cumplimiento de los objetivos estratégicos del área, asesorar a la alta dirección en materia de ciberseguridad, desarrollar políticas y marcos de gobierno, fomentar una cultura de «security by design», gestionar amenazas e incidentes de seguridad y contribuir a la evolución de las capacidades de ciberresiliencia del grupo. Además, el puesto tendrá un papel clave en la relación con directivos de negocio y responsables tecnológicos de las distintas entidades internacionales de AXA, participando en iniciativas de transformación, simplificación e innovación para fortalecer la seguridad de la organización. La compañía busca perfiles con experiencia en seguridad de la información, ciberresiliencia, gestión de programas, gobierno de la seguridad y gestión de stakeholders, así como capacidad de liderazgo, pensamiento estratégico, toma de decisiones y habilidades de comunicación en entornos multiculturales. Se requiere un mínimo de cuatro años de experiencia en Information Security, experiencia en organizaciones globales y un nivel fluido de inglés. Se valorará especialmente la experiencia en consultoría, asesoramiento estratégico y gestión de equipos. Con presencia en 54 países, más de 153.000 empleados y alrededor de 105 millones de clientes, AXA continúa avanzando en su transformación hacia una compañía tecnológica y sostenible. Desde AXA Group Operations, la organización impulsa esta evolución mediante el uso de la tecnología, los datos, la innovación y la ciberseguridad como pilares para fortalecer el negocio asegurador a escala global. #J-18808-Ljbffr

We are seeking a highly skilled and experienced Security Architect to contribute in the design, implementation, and maintainance of the Information Security Management System (ISMS) within Airbus Defence and Space, ensuring compliance with new Part IS regulation. • Contribute to the ISMS implementation and maintenance; documenting and maintaining all the approved organisation key processes, procedures, roles and responsibilities;, • Contribute to the ISMS inventory through the analysis of their process / procedure and assets identification;, • Perform, review/update and technically approve security risk assessment on the assets of the Approved Organisation (IT/OT). Using Methods and tools like (MAGERIT/PILAR, EBIOS/FENCE), • Define, propose, ensure decision and perform follow up on the security risk treatment plans;, • Communicate the outcome of the risk assessment and treatment plan to the ISMS manager, other personnel (as the Business Asset Owner), and other organisations sharing an interface (Security Incident Response Leader, Vulnerability Management Team, NISO),, • Analyse, Perform, review/update and technically approve security incident report on the assets of the Approved Organisation,, • Define, propose, ensure decision and perform follow up on information security incident response plan,, • Cooperate on investigations with other organisations that contribute to the information security of its own activities, • Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred., • Minimum of 5 years of experience in information security, with at least 3 years in a Security Architect role specifically focused on ISMS., • Strong expertise in ISO 27001, ENS (Esquema Nacional de Seguridad) implementation and auditing., • In-depth knowledge of information security principles, frameworks, and best practices (e.g., NIST, COBIT, NIS2, ENS)., • Proven experience in security risk assessment methodologies and tools (MAGERIT/PILAR, EBIOS/FENCE) applied to IT/OT environments., • Familiarity with various security technologies such as firewalls, IDS/IPS, SIEM, IAM, and data encryption., • Knowledge of EASA part 21 and Approved organisations in an aeronautical environment., • Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security concepts to technical and non‑technical audiences., • Fluency in English is required; Spanish proficiency is a plus., • Flexible workshift, • Option of continuous schedule from May to September, • Vacation days plus additional days-off along the year (+35 working days off in total), • Attractive & competitive salary and additional bonus, • Hybrid model of working when possible, promoting the work‑life balance, • Collective transport service in some sites, • Benefits such as health insurance, employee stock options, retirement plan, or study grants, • On‑site facilities (among others): free canteen, kindergarten, medical office, • Possibility to collaborate in different social and corporate social responsibility initiatives, • Excellent upskilling opportunities and great development prospects in a multicultural environment, • Special rates in a wide range of products & other benefits The successful candidate will be subjected to a NATO/National security clearance in order to undertake related work in accordance with the business needs. This role will involve occasional travel for business. This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth. Company: Airbus Defence and Space SAU Employment Type: Permanent Experience Level: Professional Job Family: Cyber Security Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief. Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com. #J-18808-Ljbffr

As a world-leading insurance company, we act for human progress by protecting what matters. With 153,000 employees in 54 countries working for 105 million customers, we've created a truly dynamic and vibrant community. Inclusion and diversity link closely with our values, and together we're nurturing a culture of respect, for each other, for our customers and the communities around us. Join AXA and you'll feel like you belong, are included and can thrive. You'll be able to shape the way you work and truly grow your potential as you seek out new opportunities, push boundaries and benefit people in critical moments of their lives. This is your chance to build the tomorrow you want. Know you can. AXA is becoming a sustainable tech-led company and at AXA Group Operations we are one of the major catalysts for this transformation. We set the tone by triggering and empowering the evolution of our insurance business model through technology and innovation, driving its concrete implementation globally at speed, with a high quality of advisory and execution. We are present across 17 countries with committed, highly qualified teams. We leverage technology, data, sourcing, security and investment allocation in a global way, but also achieve economies of scale and synergies when necessary. At AXA Group Operations, we want to be recognized in three fields of action: • State-of-the-art Data Technology to drive customer experience, • State-of-the-art Procurement & Sourcing to drive efficiency and better manage risks, • High-Performing Global Team for stronger partnerships with AXA entities You will join the Group Security division, defining the security standards to be applied by AXA entities, overseeing the overall security posture across the Group and providing centralized services to support entities (Crisis Management, Security Operations Centre, etc.). Throughout AXA Group, the security community represents composed of 1000 security professionals, working daily to protect our customers, operations, brand and people. To achieve this, we have gathered our three security disciplines: Information Security, Physical Security and Operational Resilience. • Monitor the Security Threat Landscape, • Define and oversee Security Standards and Strategy implementation across the Group, • Drive local security objectives with C-Level executive (COO, CIO, CTO, CFO…) of AXA entities, • Ensure the security of Group Operations as an entity, • Provide centralized security services and products to AXA entities, • Corporate functions (Group Mandate) : Security Advisory and Standards, Security Governance, Security Risk & Assurance, Security Strategy and Awareness, • CyberDefense (Group security services and products provider), • Group Operations Security (Security of the hosting entity) Ensure the security of AXA GO products throughout their lifecycle by embedding robust security practices into product governance and aligning with overall product strategy. Act as a key advisor to senior management (CIO, CTO, CSO/CISO, CRO) on security matters. • Oversee security posture of GO products across their lifecycle., • Ensure compliance with Group Security Instructions and GO Security Policies., • Standardize security governance across the GO product catalog., • Escalate security risks beyond appetite and represent GO Security in risk committees., • Maintain reporting on security posture and elevate issues as needed., • Drive remediation of audit findings for assigned products., • Implement the Security Assurance Framework in GO products., • Coordinate security activities across GO Security teams to align with product strategy., • Manage security exceptions for products in scope., • Advise senior management on information risk, cybersecurity, privacy, IAM, architecture, and related topics. We are looking for someone with the following experience and skills: • University degree in security or related fields; postgraduate degree (MBA) is a plus., • 10+ years of experience in security roles (CISO/CSO or similar) within international organizations., • Experience in product-oriented environments., • Familiarity with Agile methodologies., • Expertise in Information Security Governance and Strategy., • Expertise on IAM solutions, Identity Process , Active Directories and associated security governance, • Strong knowledge of security for Public Cloud and On-Prem technologies., • Understanding of assurance and implementation-level controls., • Certifications (CISSP, CISM, CRISC, PMI-RMP) are an asset., • Knowledge of security program/project management and audit processes., • Awareness of AI-specific security controls is a plus., • Excellent written and verbal communication skills., • Ability to manage complex situations, work independently, and prioritize tasks., • Strong interpersonal skills and team spirit., • Capacity to lead committees and defend security objectives., • Long-term planning (2-5 years) for resource and budget needs., • Decision-making and problem-solving within authority limits., • Fluency in English (including security terminology)., • Excellent written and verbal communication skills to exchange with AXA GO Management, products stakeholders and OpCos representatives., • Ability to work independently and manage multiple tasks simultaneously., • Ability to build strong interpersonal relationships with a variety of internal and external stakeholders., • Team spirit and ability to collaborate effectively with internal and external teams., • Ability to animate steering committees and defend Group Operations Security objectives., • Ability to work collaboratively with multi-disciplinary teams., • Ability to plan up to 2-5 years ahead to ensure the successful delivery of outputs, particularly when preparing budget or resources requirements., • Ability to prioritize activities and to manage action plans, review progress and adjust where required., • Ability to weigh things up quickly and take the initiative within limits of authority., • Ability to recommend solutions relevant to the complexity, scope, risk, and magnitude of problems impacting the service level., • Fluency in English is a necessity (including Information Security English). We bring together the expertise, cultural diversity and creativity of over 8,000 employees worldwide and we're committed to equal opportunities in all aspects of employment (gender, LGBT+, disabled persons, or people of different origins) and to promoting Diversity & Inclusion by creating a work environment where all employees are treated with dignity and respect, and where individual differences are valued. #J-18808-Ljbffr

Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed. If you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future. The Senior Audit Manager - IT & Information Security is a technology risk expert responsible for evaluating and enhancing the internal control environment across cloud infrastructure, cyber security controls, third-party ecosystems, and engineering platforms used in the SDLC. This candidate combines deep technical expertise in cloud security and DevSecOps with financial technology regulations (e.g., DORA, FCA PS21/3, PRA Operational Resilience, ISO 27001). 5+ years in IT/Cyber Audit within cloud-native Fintech platforms, financial institutions, or Big 4 tech practice. CISA, CISSP, CISM, or CRISC required; dual ACA/CIA qualification preferred. Cloud Infrastructure (AWS), Identity & Access Management, SIEM/SOC (Splunk, CrowdStrike, ReliaQuest), GRC (AuditBoard). DORA, FCA PS21/3, PRA Operational Resilience, ISO 27001, COBIT, NIST framework, and related. Payments lifecycle, treasury automation platforms, API security, third-party/BPO risk management. The Senior Audit Manager - IT & Information Security leads the design, execution, and delivery of the annual IT Audit Plan. Reporting to the Group Head of Internal Audit, the role provides independent assurance to executive stakeholders (CIO, CISO, COO, CRO, DPO) and the Audit Committee regarding platform resilience, cybersecurity maturity, data protection, and adherence to evolving international regulatory standards. • Lead risk-based audits covering cloud infrastructure (AWS), network security, Identity & Access Management (IAM), privileged access, and containerized deployment environments., • Assess operational effectiveness of Cyber Defense controls, including SOC monitoring, Incident Response, SIEM integration (Splunk), and EDR deployments (CrowdStrike)., • Perform audits of IT General Controls (ITGCs) and automated application controls (ITACs) integrated into CI/CD deployment pipelines., • Evaluate third-party vendor risk management frameworks, conducting hosted assurance reviews for critical SaaS platforms., • Oversee control assurance frameworks for third-party partnerships, ensuring compliance with DORA and FCA PS21/3 operational resilience guidelines., • Assess readiness and operational adherence to key regulatory regimes, including DORA, PRA Operational Resilience, SWIFT Customer Security Programme (CSP), and ECCTA/FTP regulations., • Conduct gap analyses and pre-assessment audits against ISO 27001 and PCI DSS standards., • Evaluate data governance frameworks, data lineage, and data quality controls across enterprise analytics and reporting platforms., • Audit data protection and privacy policies and mechanisms (such as GDPR/CCPA) applied within large-scale data storage and analytics environments., • Maintain strong relationships with technical stakeholders, including the CISO, Head of Engineering, CIO, and Chief Data Officer., • Formulate pragmatic, risk-ranked audit findings and present formal audit reports to Executive Committees and Board Audit Committees., • Min 5 years experience auditing cloud-native digital architecture (microservices, containerization, API integrations)., • Track record of building or executing an annual IT risk assessment and audit plan within an engineering-driven or fast-paced Fintech environment., • Proven capability in evaluating end-to-end payment processing controls (authorisation, clearing, settlement, reconciliation)., • Certified Information Systems Auditor (CISA), • Certified Information Systems Security Professional (CISSP), • Certified Internal Auditor (CIA) (highly advantageous), • Ability to translate complex cybersecurity and technical risks into clear, business-focused insights for non-technical executives., • Pragmatic approach to control framework design, balancing rapid product innovation with regulatory compliance and robust risk management., • Strong collaborative mindset with experience in mentoring junior auditors and managing external co-source resource partners., • Competitive Starting Salary with an annual discretionary bonus that truly rewards your performance from day one., • Dedicated Mentorship: Learn directly from experienced managers who are invested in your success., • Cutting-Edge Technology: Leverage state-of-the-art tailor made tools and systems that enable you to perform at your best., • Clear, Accelerated Career Progression: Defined pathways to leadership and specialist roles within Ebury., • Dynamic & Supportive Culture: Work in a collaborative environment where teamwork and personal growth are prioritized., • Generous Benefits Package: Access competitive benefits tailored to your location, which typically include health care and social benefits., • Central Office: A fantastic location with excellent transport links. Ebury delivers sophisticated, integrated solutions — business accounts, hedging, and financing — on a single platform with a seamless workflow. Our success is built on a simple premise and singular purpose: To help businesses operate and scale globally. Since its founding in 2009, Ebury has always been a fast-growing leader in fintech. Today, we bring together 2000+ Eburians across nearly 70 cities and we’re always looking to add to our team. At the heart of our offering is a proprietary platform, purpose-built to help businesses seamlessly streamline and manage global cash flow. We focus on continuous product evolution and innovation to build the infrastructure for borderless growth and help our clients scale at every stage. The opportunities at Ebury are as diverse as our people, ranging from business development to engineering roles across our tech pillars. We believe in inclusion. We stand against discrimination in all forms and are against the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story. Ebury only accepts applications via official Ebury channels. We will only contact you from an @ebury.com domain. Always check the emails you receive from us, and note that we will never request payment for any part of the recruitment process. Stay safe and report suspicious activity. Ebury does not accept unsolicited resumes, CVs, or candidate profiles from recruitment agencies or search firms without signed written Ebury recruitment terms in place for a specific role. Any unsolicited applications will be considered the sole property of Ebury. Ebury will not be responsible or liable for any placement fees or costs associated with unagreed candidate submissions or subsequent hires. Ebury uses Artificial Intelligence (AI) and automated tools to help streamline certain parts of our recruitment process, however, these tools are strictly for administrative efficiency. All hiring decisions, including application reviews, shortlisting, and final selections are evaluated and conducted by human talent acquisition professionals and hiring managers. #J-18808-Ljbffr

At ALS, we encourage you to dream big. When you join us, you’ll be part of a global team harnessing the power of scientific testing and data-driven insights to build a healthier future. The Information Security Governance Specialist owns the governance backbone of the security programme: policy, control framework design, compliance, and audit assurance. This role translates security strategy into structured, auditable, and operationally realistic governance artefacts (e.g.: exception registers, policy suites, control frameworks, audit programmes) and works across the business to embed them into everyday operation. Key responsibilities Develop, maintain, and periodically review information security policies, standards, and procedures aligned to ISO 27001 and other recognised cybersecurity frameworks. Maintain the security governance calendar (policy reviews, management reviews). Support design and evolution of the organisation's security strategy and multi-year security programme roadmap. Administer the security exception/waiver process end-to-end: intake, documentation, approval routing, and tracking of time-bound remediation commitments through to closure. Maintain the control framework catalogue, mapping controls to ISO 27001 Annex A, NIST CSF, and CIS Controls, and flag control gaps for risk assessment by the Information Security Risk Specialist. Partner with the Information Security Risk Specialist to ensure exceptions and control gaps are risk-assessed and formally risk-accepted by the appropriate owner before a waiver is granted. Coordinate internal and external audits and certification cycles (e.g. ISO 27001), including evidence collection and remediation tracking. Map controls to regulatory and contractual obligations (GDPR, PCI-DSS, HIPAA, sector-specific requirements as applicable). Maintain a defensible audit trail for control operation and governance decisions. Produce executive-ready reporting: governance and compliance dashboards, programme status updates, board and committee papers. Act as a trusted point of contact for business units seeking governance guidance on new initiatives. Contribute governance input to post-incident reviews and remediation programmes, ensuring lessons learned convert into control or policy change. * Support the broader team on cross-functional initiatives (e.g. data protection projects, security awareness) as priorities require. Working at ALS The ALS team is a diverse and dedicated community united by our passion to make a difference in the world. Our values are important to us, and shape how we work, how we treat each other and how we recognise excellence. At ALS, you’ll be supported to develop new skills and reach your full potential. We invest in our people with programs and opportunities that help you build a diverse career with us. We want everyone to have a safe, flexible and rewarding career that makes a positive impact on our people, the planet and our communities. Everyone Matters ALS is proud to be an equal opportunity employer and is committed to fostering an inclusive work environment where the strengths and perspectives of each employee are both recognised and valued. ALS also welcomes applications from people with all levels of ability. Reasonable adjustments to support candidates throughout the recruitment process are available upon request. Eligibility To be eligible to work at ALS you must be a Citizen or Permanent Resident of the country you are applying for, or either hold or be able to obtain, a valid working visa. #J-18808-Ljbffr

OKUANT busca un Portafolio Manager para liderar la gestión de carteras y la recuperación de activos inmobiliarios en Madrid. El rol requiere experiencia en deuda con garantía hipotecaria y habilidades de negociación. Se valoran capacidades de análisis y coordinación entre abogados, asesores y entidades relevantes. La posición reporta al departamento de Portfolio Management y ofrece incorporación inmediata a jornada completa en una empresa joven y dinámica situada en el centro de Madrid. #J-18808-Ljbffr

Implementación de políticas de seguridad: Colaborar en la creación y mantenimiento de políticas de seguridad, normas y procedimientos para la protección de datos. En TechNova Solutions, una empresa líder en soluciones tecnológicas innovadoras, buscamos incorporar un/a Técnico/a en Cibersegur

En Accenture, podrás aportar tu visión innovadora para reinventar sectores enteros del mercado, trabajando con algunas de las empresas más importantes del mundo. Da forma al futuro de los negocios y la tecnología desarrollando soluciones de vanguardia capaces de generar nuevo valor. Únete a nuestra red internacional de talento especializada en Ciberseguridad. Trabajarás con tecnologías innovadoras en proyectos apasionantes, desarrollando soluciones para gestionar los datos de forma segura. Entre tus principales responsabilidades se incluyen: • Analizar incidentes e intrusiones para determinar la causa y el alcance de las vulneraciones de seguridad, utilizando soluciones EDR y fuentes de inteligencia sobre amenazas., • Realizar análisis forense de equipos (host forensics), análisis forense de redes, análisis de registros (logs) y análisis de malware, proporcionando respuesta ante incidentes de ciberseguridad., • Participar en actividades de respuesta ante incidentes (Incident Response) y búsqueda proactiva de amenazas (Threat Hunting)., • Identificar tácticas, técnicas y procedimientos (TTPs) utilizados en los ataques para desarrollar indicadores de compromiso (IoCs)., • Diseñar e implementar planes de remediación., • Llevar a cabo ejercicios de simulación (Tabletop Exercises) y validar los procedimientos incluidos en los Planes de Respuesta ante Incidentes. Si compartes nuestra pasión por la ciberseguridad y cuentas con las siguientes capacidades, queremos conocerte: • Conocimiento de técnicas de análisis forense de archivos y memoria, así como de herramientas especializadas como EnCase, Axiom, Autopsy, KAPE, Plaso, Volatility y FTK Suite., • Buen dominio de procesos y procedimientos de gestión y respuesta ante incidentes de seguridad., • Conocimiento sólido de operaciones de ciberseguridad y experiencia con herramientas EDR y SIEM como CrowdStrike, Microsoft Defender for Identity, Trend Micro Vision One y Splunk., • Experiencia en análisis estático y/o dinámico de malware utilizando herramientas como IDA Pro, OllyDbg y la distribución REMnux., • Experiencia en análisis forense de discos y memoria en entornos Windows, Unix y Linux., • Conocimientos avanzados de análisis de tráfico y protocolos de red utilizando herramientas como Wireshark., • Nivel alto de inglés., • Titulación universitaria en Informática, Ingeniería Informática, Ciberseguridad o disciplinas relacionadas., • Certificaciones como CISSP y certificaciones SANS GIAC (GCIH, GCFE, GCFA, GCFR, GREM). #J-18808-Ljbffr

Consultor/a GRC Ciberseguridad (PKI/eIDAS). Asesoramiento estratégico en materia de ciberseguridad, así como proactividad en la propuesta de mejoras en los proyectos y servicios en los que participes. Ofrecemos la oportunidad de asistir, junto al equipo de ciberseguridad, a conferencias, ponencias

AXA Group Operations in Madrid is seeking an AI-Enhanced Penetration Tester to advance cybersecurity using AI/ML techniques. You will conduct advanced assessments, automate vulnerabilities, and defend against threats in a dynamic environment. You will work on OSINT, SAST/DAST, API/web/mobile ecosystems, and develop AI-driven pentesting workflows, monitor attack surfaces, and provide data-driven remediation insights. #J-18808-Ljbffr

• Serving as the primary contact for the operational activities related to Cyber Defense within the Entities/OpCo’s., • Deliver day-to-day security operations management and reporting as the 1st line of defense (execution). That includes managing related cybersecurity request, incident, change request and resolution management for services in scope., • Oversee and drive the processes in various domain: infrastructure security operations, security incident and crisis management, audit remediations, and vulnerability management., • Ensure comprehensive coverage and reporting of all security tool implementations across all in-scope assets., • Monitor, report on, and drive compliance with operational SLAs, KPIs, and KRIs for subscribed services, coordinating with relevant stakeholders., • Act as the extension of the Cyber Defense Global team, delivering tools and services to entities/opco’s., • Serve as the primary security operations contact within Group Operations, collaborating across organizational boundaries (e.g., OpCo’s, Solution Delivery, regional and local CISOs, vendors, etc.)., • Function as the Security Operations Subject Matter Expert (SME) to detect, respond to, and defend AXA against malicious actors and threats., • Oversee security monitoring and the incident lifecycle, including executive and client communications, direct resource management and coordination, and end-to-end process oversight from detection to post-mortem and root-cause analysis (RCA)., • Ensure and enforce information security relevant controls and process across the AXA entities., • Participate as required in global security programs and projects to deliver assigned objectives., • Contribute to audit relevant investigations and their management action plans to remediate the discovered risks., • Act as a security advocate to promote security policies and culture / mindset, • Act as a security advisor to the relevant stakeholders on security matters, • Participate and support local Security Programs and Projects, • Contribute to rapid incident response by recommending and prioritizing appropriate responses and by contributing to the lessons learned and post-incident activities We are looking for someone with the following experience and skills: • Diploma or Bachelor’s degree in Computer Science, IT, Engineering, or related fields, • Experience in IT > 15 years, • Experience in IT Security > 10 years, • Proven experience in running Security Operations and project works in the following categories below., • In-depth knowledges of infrastructure and application vulnerabilities, architectures and challenges., • Information Security and/or Information Technology industry certification like CISSP, CCSP, CISM, CISA, CEH, GCIH, GCIA, OSCP, and etc, is a plus, • Experience on Cloud Security is a plus, • Cross-cultural sensitivity and flexibility. Appreciate diversity and inclusiveness., • Experience with security operations, risk and service delivery frameworks., • Familiar with local and regional regulatory requirements for entities, • Knowledge of information security best practices, architecture, standards and threat landscape, • Customer-centric and strong service delivery skills with escalation management capabilities, • Strong interpersonal and communication skills; able to deal effectively with diverse skill sets and personalities, works effectively as a team player, • Organized with a proven ability to prioritize workload, meet deadlines, and utilize time effectively, • Able to translate technical requirements and communicate at all levels, • Apply analytical rigor to understand complex business scenarios, • Ability to function effectively in a matrix structure., • Ability to function with minimal supervision, • Subject Matter Expert for the following in-scope security services below., • Network Security - at least intermediate knowledges for minimum 3 solutions, • Firewall review and assessment, • Intrusion Prevention System (IPS), • DDoS protection, • Secure Web Access (Proxy), • Web Application Firewall (WAF), • End-Point Security - at least intermediate knowledges for minimum 2 solutions, • Malware Protection (Anti-Virus, Anti-Malware), • Data Security - basic knowledges, • Encryption, • SIEM - basic knowledges, • Security Incident Handling/Response - intermediate knowledges #J-18808-Ljbffr