HQ - CISO - EMEA Remote

Job&Talent is looking for a Chief Information Security Officer (CISO) to own and lead the company's global information security strategy, organization, and execution. Reporting directly to the CTO, the CISO will be responsible for protecting Job&Talent's technology, infrastructure, products, corporate environment, and data while enabling the company to move quickly and safely. Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries, headquartered in Madrid.

Responsibilities

Own and continuously evolve the global information security strategy and roadmap; Translate technical security risks into clear business risks and provide the CTO and executive team with an accurate view of the security posture; Establish measurable security objectives, KPIs, KRIs and risk-acceptance processes; Build a security organization capable of supporting a fast-moving global technology company; Own the security lifecycle across products and the engineering organization, including threat modelling, architecture reviews, secure development, application and supply-chain security, vulnerability management and security testing; Own security architecture across cloud infrastructure and platform environments; Partner with Engineering, Platform and SRE to integrate security into development and infrastructure processes; Provide security governance for AI-powered products, agents, and LLM integrations; Own security across the corporate technology environment, including identity and access management, privileged access, endpoint and SaaS security, and corporate network security; Drive the organization toward a Zero Trust model; Own the technical controls required to protect sensitive data throughout its lifecycle, including data access, encryption, monitoring and data-loss prevention; Partner with Legal, Privacy and the DPO on applicable privacy requirements; Build and improve the ability to detect, investigate, contain and recover from security incidents; Own security monitoring, detection engineering, incident response and threat intelligence capabilities; Ensure significant security incidents are handled with strong operational discipline and coordination; Drive continuous improvement through incident reviews, remediation and lessons learned; Maintain and evolve the security management framework, risk management and compliance programs, including ISO 27001, SOC 2 Type II, GDPR and applicable customer and regulatory security requirements; Own security risk management across the technology and vendor ecosystem; Establish the technical security framework for AI across products and internal use; Address emerging AI risks including data access, AI agents, authentication and authorization, data exfiltration, model and provider risk, and shadow AI; Partner with Legal and Privacy on regulatory requirements, including the EU AI Act; Build and develop a strong security organization with clear ownership and accountability; Build a strong security culture across the company; Develop targeted security education and security champion programs

Requirements

10+ years of experience in information security, with significant experience within global software technology product companies; 5+ years in significant security leadership roles within technology, SaaS, marketplace, fintech, HR-tech or similarly data-intensive product environments; 2+ years as a CISO, VP Security or equivalent senior security leader within a global SaaS or software technology product company; Experience leading security across both product technology and corporate IT environments; Strong track record across Product and Application Security, cloud security and modern security architecture; Demonstrated experience building or operating mature Security Operations and Incident Response capabilities; Deep understanding of modern identity architecture, IAM, SSO, device trust and Zero Trust principles; Experience protecting significant volumes of personal or otherwise sensitive data and managing SaaS and third-party security risks; Experience with ISO 27001, SOC 2, GDPR and enterprise customer security requirements; Familiarity with AI security and emerging risks associated with LLM-based applications and AI agents; Experience partnering with Engineering, Platform, SRE, IT, Legal and Privacy teams, as well as executive leadership; Technical Credibility; Risk-Driven Thinking; Pragmatic Approach; Data-Driven Leadership; Hands-On Mindset; Engineering Collaboration; Incident Leadership; Organizational Leadership