{"id":3275028,"url":"https://alion.io/job/cex-io-information-security-director-spain","title":"Information Security Director, Spain","company":{"id":175539,"name":"CEX.IO","domain":"cex.io","url":"https://alion.io/company/cex-io","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":67000,"max_usd":162000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":291},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Grafana","optional":false},{"name":"Incident Management","optional":false},{"name":"Kibana","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-05-14T00:00:00Z","employer_posted_date":"2026-05-14","last_verified_at":"2026-10-28T16:05:40Z","board_verified":true,"closed_at":null,"days_open":167,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":167},"description":"CEX.IO Europe S.L. is in the final stages of obtaining authorization under the EU Markets in Crypto-Assets Regulation (MiCA) as a Crypto-Asset Service Provider (CASP) in Spain. As part of our regulatory readiness and local substance requirements, we are actively recruiting a Spain-based Information Security Director.\nThe Information Security Director will be the primary local official responsible for ensuring the digital operational resilience of CEX.IO Europe S.L. in accordance with Regulation (EU) 2022/2554 (DORA).\nThe Information Security Director’s core mandate is to maintain an effective local capacity for decision-making, supervision, and questioning over all ICT functions delegated to group entity service providers. This includes the explicit authority to understand, supervise, question, approve, reject, or nullify any technical action, proposal, or recommendation from Group service providers that impacts EU operations.\nThe Information Security Director is responsible for the independent management of technology and cyber risks within the Spanish jurisdiction, ensuring operational substance and digital resilience. The Information Security Director acts as the principal technical liaison and accountable officer for the National Securities Market Commission (CNMV) and the Bank of Spain on all cybersecurity, DORA compliance, and DLT-related supervisory matters.\nKey Responsibilities\nDORA & MiCA Governance:Lead the implementation and maintenance of the ICT risk management framework to meet CNMV, ESMA, and EBA standards.\nOversight of Delegated Functions:Supervise and control ICT services provided by CEX.IO group entities (including CEX.IO Ltd, UK), spanning cloud infrastructure, software development, and security operations.\nICT Risk Management:Identify, assess, and mitigate technological risks. Conduct annual reviews of the Business Impact Analysis (BIA) and the ICT Risk Assessment.\nIncident Management:Act as the ultimate local authority for initiating the Incident Response Plan (IRP) for high and critical security events. Coordinate notifications of major ICT-related incidents to the CNMV within mandated regulatory timelines (4h / 72h / 30 days).\nThird-Party ICT Security:Supervise critical ICT third-party service providers, monitoring compliance with contractual SLAs, Recovery Point Objectives (RPOs), and Recovery Time Objectives (RTOs).\nCustody Security & Cryptographic Controls:Oversee the security of crypto-asset custody solutions (proprietary V2/V3 infrastructure and external sub-custodians). Ensure the integrity of Multi-Party Computation (MPC), Hardware Security Modules (HSM), and multisig signing workflows.\nSecure SDLC Oversight:Supervise the Secure Software Development Life Cycle (SDLC) and validate security testing in pre-production (UAT) environments prior to operational deployment.\nResilience & DLT Testing:Approve and collaborate on operational resilience testing plans, threat-led penetration testing (TLPT), and specific tests covering Distributed Ledger Technology (DLT) protocols.\nAsset & Inventory Governance:Maintain a unified, centralized inventory of all CEX.IO ICT assets, systems, and network infrastructure supporting Spanish and EU operations.\nRequirements and Qualifications\nUniversity degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field, ideally holding relevant industry certifications (e.g., CISM, CISSP, CRISC, or CISA).\nProven track record in building cybersecurity frameworks and complying with EU financial sector regulations (DORA, MiCA, PCI DSS).\nTechnical Domain Knowledge: Vulnerability management, threat monitoring tools, and SIEM/SOC platforms (e.g., Grafana, Kibana, Elastic).\nCryptographic protocols, key ceremony management, and secure private key storage.\nStrong communication skills for interacting directly with financial regulators (CNMV / Bank of Spain) and leading technical governance under a \"hub and spoke\" group operational model.\nFull local tax/legal residency in Spain with native/bilingual proficiency in Spanish and professional working proficiency in English.","description_format":"text","description_chars":4111,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Spanish","level":"Advanced (C1)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Cryptocurrencies","Crypto Exchanges","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-26T14:00:10Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.388,"p_room":0.28,"age_days":167,"expected_fill_days":30,"reasons":["conf:0","urgency","win:tail","crowd:"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/cex-io-information-security-director-spain","json_url":"https://alion.io/job/cex-io-information-security-director-spain.json","meta":{"generated_at":"2026-10-28T18:58:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25930,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175539},"rest":"https://alion.io/mcp/rest/get_company?id=175539"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcex-io-information-security-director-spain"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcex-io-information-security-director-spain"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcex-io-information-security-director-spain"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cex-io-information-security-director-spain\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcex-io-information-security-director-spain"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3275028}},{"tool":"search_jobs","arguments":{"company":"cex.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3275028},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}