{"id":822807,"url":"https://alion.io/job/als-information-security-governance-specialist","title":"Information Security Governance Specialist","company":{"id":449653,"name":"ALS","domain":"alsglobal.com","url":"https://alion.io/company/als-4","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":80,"ghost_share":0,"stale_share":0.763,"repost_share":0.013,"time_to_fill_p50_days":30,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":37000,"max_usd":100000,"period":"year","method":"role_country_seniority_unknown","sample_n":24},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-08-20T00:00:00Z","employer_posted_date":"2026-08-20","last_verified_at":"2026-10-31T05:46:10Z","board_verified":true,"closed_at":null,"days_open":72,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":72},"description":"At ALS, we encourage you to dream big.\nWhen you join us, you’ll be part of a global team harnessing the power of scientific testing and data-driven insights to build a healthier future.\nThe Information Security Governance Specialist owns the governance backbone of the security programme: policy, control framework design, compliance, and audit assurance. This role translates security strategy into structured, auditable, and operationally realistic governance artefacts (e.g.: exception registers, policy suites, control frameworks, audit programmes)and works across the business to embed them into everyday operation.\nKey responsibilities\nDevelop, maintain, and periodically review information security policies, standards, and procedures aligned to ISO 27001and other recognised cybersecurity frameworks.\n\nMaintain thesecurity governance calendar (policy reviews, management reviews).\n\nSupport design and evolution of the organisation's security strategy and multi-year security programme roadmap.\n\nAdminister the security exception/waiver process end-to-end: intake, documentation, approval routing, and tracking of time-bound remediation commitments through to closure.\n\nMaintain the control framework catalogue, mapping controls to ISO 27001 Annex A, NIST CSF, and CIS Controls, and flag control gaps for risk assessment by the Information Security Risk Specialist.\n\nPartner with the Information Security Risk Specialist to ensure exceptions and control gaps are risk-assessed and formally risk-accepted by the appropriate ownerbefore a waiver is granted.\n\nCoordinate internal and external audits and certification cycles (e.g. ISO 27001), including evidence collection and remediation tracking.\n\nMap controls to regulatory and contractual obligations (GDPR, PCI-DSS, HIPAA, sector-specific requirements as applicable).\n\nMaintain a defensible audit trail for control operation and governance decisions.\n\nProduce executive-ready reporting: governance and compliance dashboards, programme status updates, boardand committee papers.\n\nAct as a trusted point of contact for business units seeking governance guidance on new initiatives.\n\nContribute governance input to post-incident reviews and remediation programmes, ensuring lessons learned convert into control or policy change.\n\nSupport the broader team on cross-functional initiatives (e.g. data protection projects, security awareness) as priorities require.\n\nWorking at ALS\nThe ALS team is a diverse and dedicated community united by our passion to make a difference in the world.\nOur values are important to us, and shape how we work, how we treat each other and how we recognise excellence.\nAt ALS, you’ll be supported to develop new skills and reach your full potential. We invest in our people with programs and opportunities that help you build a diverse career with us.\nWe want everyone to have a safe, flexible and rewarding career that makes a positive impact on our people, the planet and our communities.\nEveryone Matters\nALS is proud to be an equal opportunity employer and is committed to fostering an inclusive work environment where the strengths and perspectives of each employee are both recognised and valued.\nALS also welcomes applications from people with all levels of ability. Reasonable adjustments to support candidates throughout the recruitment process are available upon request.\nEligibility\nTo be eligible to work at ALS you must be a Citizen or Permanent Resident of the country you are applying for, or either hold or be able to obtain, a valid working visa.\nHow to apply\nPlease apply on-line and provide a resume & cover letter that best demonstrate your motivation and ability to meet the requirements of this role.","description_format":"text","description_chars":3706,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Environmental Science","Food Safety","Testing, Inspection & Certification"],"lifecycle":[{"event":"open","at":"2026-09-12T13:23:37Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.26,"p_room":0.28,"age_days":72,"expected_fill_days":30,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/als-information-security-governance-specialist","json_url":"https://alion.io/job/als-information-security-governance-specialist.json","meta":{"generated_at":"2026-10-31T07:58:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11876,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":449653},"rest":"https://alion.io/mcp/rest/get_company?id=449653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fals-information-security-governance-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fals-information-security-governance-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fals-information-security-governance-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/als-information-security-governance-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fals-information-security-governance-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":822807}},{"tool":"search_jobs","arguments":{"company":"alsglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":822807},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}