Information Security Governance Specialist

Posted 2 Months Ago
Be an Early Applicant
Madrid, Comunidad de Madrid, ESP
In-Office
Entry level
Professional Services • Pharmaceutical • Energy • Chemical
The Role
Owns information security governance across policies, standards, control frameworks, exceptions, audits, certifications, regulatory mappings, and executive reporting. The role maintains governance calendars and audit trails, coordinates evidence collection and remediation, supports security strategy and roadmap development, partners on risk assessments and waivers, and advises business units on governance requirements. It also contributes to post-incident reviews, data protection initiatives, and security awareness programs.
Summary Generated by Built In

At ALS, we encourage you to dream big.

When you join us, you’ll be part of a global team harnessing the power of scientific testing and data-driven insights to build a healthier future. 

The Information Security Governance Specialist owns the governance backbone of the security programme: policy, control framework design, compliance, and audit assurance. This role translates security strategy into structured, auditable, and operationally realistic governance artefacts (e.g.: exception registers, policy suites, control frameworks, audit programmes) and works across the business to embed them into everyday operation. 

 

Key responsibilities 

  • Develop, maintain, and periodically review information security policies, standards, and procedures aligned to ISO 27001 and other recognised cybersecurity frameworks. 

  • Maintain the security governance calendar (policy reviews, management reviews). 

  • Support design and evolution of the organisation's security strategy and multi-year security programme roadmap. 

  • Administer the security exception/waiver process end-to-end: intake, documentation, approval routing, and tracking of time-bound remediation commitments through to closure. 

  • Maintain the control framework catalogue, mapping controls to ISO 27001 Annex A, NIST CSF, and CIS Controls, and flag control gaps for risk assessment by the Information Security Risk Specialist. 

  • Partner with the Information Security Risk Specialist to ensure exceptions and control gaps are risk-assessed and formally risk-accepted by the appropriate owner before a waiver is granted. 

  • Coordinate internal and external audits and certification cycles (e.g. ISO 27001), including evidence collection and remediation tracking. 

  • Map controls to regulatory and contractual obligations (GDPR, PCI-DSS, HIPAA, sector-specific requirements as applicable). 

  • Maintain a defensible audit trail for control operation and governance decisions. 

  • Produce executive-ready reporting: governance and compliance dashboards, programme status updates, board and committee papers. 

  • Act as a trusted point of contact for business units seeking governance guidance on new initiatives. 

  • Contribute governance input to post-incident reviews and remediation programmes, ensuring lessons learned convert into control or policy change. 

  • Support the broader team on cross-functional initiatives (e.g. data protection projects, security awareness) as priorities require. 

Working at ALS

The ALS team is a diverse and dedicated community united by our passion to make a difference in the world.

Our values are important to us, and shape how we work, how we treat each other and how we recognise excellence. 

At ALS, you’ll be supported to develop new skills and reach your full potential. We invest in our people with programs and opportunities that help you build a diverse career with us. 

We want everyone to have a safe, flexible and rewarding career that makes a positive impact on our people, the planet and our communities.

Everyone Matters

ALS is proud to be an equal opportunity employer and is committed to fostering an inclusive work environment where the strengths and perspectives of each employee are both recognised and valued.

ALS also welcomes applications from people with all levels of ability. Reasonable adjustments to support candidates throughout the recruitment process are available upon request. 

Eligibility
To be eligible to work at ALS you must be a Citizen or Permanent Resident of the country you are applying for, or either hold or be able to obtain, a valid working visa.

How to apply
Please apply on-line and provide a resume & cover letter that best demonstrate your motivation and ability to meet the requirements of this role.

Skills Required

  • Must be a citizen or permanent resident of the country of application, or hold or be able to obtain a valid working visa.

ALS Limited Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about ALS Limited and has not been reviewed or approved by ALS Limited.

  • Flexible Benefits — Feedback suggests some locations allow schedule flexibility, such as varied start times or shift options, which can help with work-life needs. These arrangements often depend on the specific site and management approach.

ALS Limited Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Brisbane
11,000 Employees

What We Do

ALS Limited is a global leader in testing, inspection, certification, and verification services, providing comprehensive solutions across industries such as life sciences, minerals, industrial, and energy.

Similar Jobs

Pfizer Logo Pfizer

Product & MVP Lead

Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
In-Office or Remote
32 Locations
121990 Employees

Pfizer Logo Pfizer

Value & Performance Lead

Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
In-Office or Remote
32 Locations
121990 Employees

Pfizer Logo Pfizer

Investment Lead

Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
In-Office or Remote
32 Locations
121990 Employees

Pfizer Logo Pfizer

Ecosystem & Partnerships Lead

Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
In-Office or Remote
32 Locations
121990 Employees

Similar Companies Hiring

Cravath, Swaine & Moore LLP Thumbnail
Legal Tech • Other • Professional Services
New York, NY
1200 Employees
Ford Energy Thumbnail
Automotive • Software • Energy • Utilities • Manufacturing • Renewable Energy
Glendale, Kentucky
55 Employees
VCA Animal Hospitals Thumbnail
Pet • Professional Services
Los Angeles, CA
35000 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account