IT & SECURITY MANAGER

We rely on IT systems to power the solutions that help consumers around the world. We’re seeking an IT & Security manager who has the technological skills to make us even more efficient. As part of the role you will also work and take lead on ISO and SOC2 Certification processes and manage those from an Internal IT Perspective.As IT & Security Manager (“ISM”) you will be lead of and be responsible for the development, implementation, and management of the organization's information security and internal IT strategy. The ISM ensures the confidentiality, integrity, and availability of the organization's data and IT systems, protecting against internal and external threats, cyberattacks, and data breaches. The ISM collaborates with the leadership team to align information security strategies with business objectives, and ensures that the organization adheres to applicable laws, regulations, and standards. The ISM will also ensure, establish and lead a security governance framework, overseeing compliance with industry standards and regulations (e.g., GDPR, HIPAA, NIST, ISO 27001, SOC2). Currently the Company is compliant with ISO 27001 and SOC2. As ISM you will act as the process owner of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with the organization's information security policies. A key element of the ISM's role is working with executive management to determine acceptable levels of security for the organization. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. As ISM you will analyze current systems and assets, recommend and implement solutions and upgrades, and provide training to end users. The ideal candidate has extensive knowledge of network maintenance, experience as a manager, and advanced industry knowledge to keep us on the cutting edge. The ISM will have an immediate impact on the day-to-day efficiency of our operations and a long-term impact on our overall growth.Objectives of This Role:Maintain essential IT infrastructure, including operating systems, security tools, applications, servers, email systems, laptops, software, and hardware.Take responsibility for projects and solutions within the larger business initiative.Handle business-critical IT tasks and systems administration.Research and evaluate emerging technologies, hardware, and software.Track and maintain hardware and software inventory.Key Responsibilities:Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program.Develop and enhance an information security management framework.Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems, and services.Provide leadership to the enterprise's information security organization.Assist with the overall business technology planning, providing current knowledge and future vision of technology and systems.Analyze departmental needs, identify vulnerabilities, and boost productivity, efficiency, and accuracy to inform business decisions.Ensure network components work together seamlessly to meet business needs, using their full range of capabilities, and stay informed about new features and competitor solutions.Analyze processes, technologies, and vendors continually to find areas for improvement.Prepare cost–benefit analyses when upgrades are necessary and monitor vendors to ensure that they’re offering the best-possible service and value for business needs.Train employees to use software and hardware; troubleshoot issues and provide technical support when needed.Develop and execute disaster planning and maintain data backups.Help manage the day-to-day needs and support requirements in the internal IT organization.Requirements:Five or more years of experience in IT management.Knowledge of common information security management frameworks, such as ISO/IEC 27001, NIST, SOC2.Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.Experience with contract and vendor negotiations and management including managed services.Experience with Cloud computing/Elastic computing across virtualized environments.Experience managing virtual network infrastructures.Deep knowledge of operating systems’ management (Windows, Mac OS X), collaboration systems (Microsoft 365, Azure Active Directory), equipment configuration and management, enterprise backup and recovery procedures, and systems performance monitoring.Expertise in implementing, configuring, and testing IT solutions.Strong proficiency in handling day-to-day management of internal IT matters in an organization with a high level of IT proficiency, including managing support functions of internal IT.Strong creative and analytical thinking.Good to Have:Deep knowledge of JIRA service managementDeep knowledge on Microsoft Intune operation and configurationInformation Security Management certifications (ISO 27001 Auditor, CISSP, CISM...)Dynamics 365 Finance & Operations managementPowerBI reportingPreferred Qualifications:Bachelor’s degree (or equivalent) in information technology or computer scienceProfessional security management certificationBenefits (Spain):All our employees, and their dependents, are part of the company’s private health insurance policy, which is provided as a social benefit.All our employees are entitled to join the flexible retribution plan of the Company, which gives access to products like ticket restaurant, ticket transport, childcare voucher, Wellhub, etc.In addition to Spanish public holidays, you will be entitled to 23 days of holiday per holiday year which coincides with the income year.We will cover all reasonable business expenses, provided they are supported by receipts and incurred appropriately in the performance of your duties, in line with our current expenses policy.