Information Security Manager

Ciklum is looking for an Information Security Manager to join our team in Spain.

We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.

About the role:

As an Information Security Manager, you'll become a part of a cross-functional development team engineering experiences of tomorrow. You will play a key role in protecting the IT organisation, promoting a security-first culture, and ensuring that critical digital assets and services remain secure and resilient. You will work closely with technical and business stakeholders to identify and manage security risks, strengthen security practices, and support the effective implementation of the information security strategy.

Responsibilities:

• Promote and embed a security-first culture across the organisation
• Drive adoption of and compliance with security policies, standards, and controls, providing expert advice and guidance to relevant stakeholders
• Contribute to the delivery and continuous improvement of the information security strategy and security programme
• Identify, assess, communicate, and manage information security risks, ensuring appropriate mitigation and remediation actions
• Ensure effective security operations, including vulnerability management, vulnerability scanning, patching, security assurance, and testing
• Coordinate and support effective security incident management across cloud and on- premises environments, ensuring lessons learned and remediation actions are implemented
• Oversee remediation activities resulting from security assessments and external audit findings
• Protect the confidentiality, integrity, availability, authenticity, and non-repudiation of information and data at rest and in transit
• Track and report the effectiveness of security initiatives against defined KPIs, identifying opportunities for continuous improvement
• Collaborate with technical, product, and business stakeholders to embed secure ways of working and ensure security considerations are incorporated into decision-making 
• Provide pragmatic, risk-based security guidance, balancing security requirements, business objectives, and commercial considerations

Requirements:

• Proven experience in Information Security, including responsibility for security capabilities within a large or complex organisation
• Strong experience implementing and/or operating an Information Security Management System (ISMS) in a large organisation
• Good understanding of information security within AWS cloud environments
• Strong understanding of security operations and security incident management across cloud and on-premises environments
• Technical background with previous experience in a hands-on technical security role or strong practical exposure to areas such as security analysis, vulnerability management/scanning, penetration testing, or security operations
• Solid knowledge of security standards and frameworks such as ISO 27001, NIST, PCI DSS, OWASP, and ITIL
• Good understanding of the international regulatory environment, particularly data privacy requirements
• Strong stakeholder management and communication skills, with the ability to influence both technical and non-technical stakeholders and gain commitment to security objectives
• Strong planning and organisational skills, with the ability to prioritise security activities and maintain focus on agreed objectives and deliverables
• Strong analytical and problem-solving skills, with a logical and pragmatic approach to complex security and business challenges
• Ability to understand business needs, technical constraints, organisational structures, and stakeholder dependencies, and to identify relevant decision-makers and influencers
• Good commercial awareness, with the ability to balance security risks, business priorities, and practical considerations when making recommendations or supporting decisions
• Collaborative mindset and ability to work effectively within cross-functional and internationally distributed teams

Desirable:

• AWS Cloud Practitioner or another relevant AWS certification
• Professional information security certifications such as ISO 27001 Lead Implementer, CompTIA Security+, CISMP, CISSP, CISM, or CISA

What’s in it for you?

• Care: your mental and physical health is our priority. We ensure comprehensive company-paid medical insurance and 4 additional undocumented sick leave day
• Tailored education path: boost your skills and knowledge with our regular internal events (meetups, conferences, workshops), Udemy license, language courses and company-paid certification
• Growth environment: share your experience and level up your expertise with a community of skilled professionals, locally and globall
• Flexibility: Own your schedule – you are the one to decide when to start your working day. Just don’t miss your regular team stand-up. We are there to support your work-life balance and provide 23 vacation days
• Opportunities: we value our specialists and always find the best options for them. Our Internal Mobility Program helps change a project if needed to help you grow, excel professionally and fulfill your potential
• Global impact: work on large-scale projects that redefine industries with international and fast-growing clients
• Welcoming environment: feel empowered with a friendly team, open-door policy, informal atmosphere within the company and regular team-building events

About us:

At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress.
Based in Málaga, our team thrives in one of Andalusia’s leading tech hubs. Enjoy a hybrid work setup, the sunny Mediterranean vibe, and endless opportunities to grow your skills on global-scale projects.

Explore, empower, engineer with Ciklum!

Interested already? We would love to get to know you! Submit your application. We can’t wait to see you at Ciklum.

#LI-VH1