{"id":3322779,"url":"https://alion.io/job/devoteam-ciso-chief-information-security-officer","title":"CISO (Chief Information Security Officer)","company":{"id":6640,"name":"Devoteam","domain":"devoteam.com","url":"https://alion.io/company/devoteam","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"A","score":88,"open_postings":527,"ghost_share":0,"stale_share":0.471,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":293000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":291},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"21 CFR Part 11","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"EU AI Act","optional":false},{"name":"FortiGate","optional":false},{"name":"GitHub","optional":false},{"name":"GMP","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Nessus","optional":false},{"name":"NIST CSF","optional":false},{"name":"Oracle ERP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SIEM","optional":false},{"name":"Sophos","optional":false}],"status":"live","first_seen_at":"2026-10-26T12:10:16Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-29T13:42:15Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Devoteam es una consultora europea líder enfocada en estrategia digital, plataformas tecnológicas, ciberseguridad y transformación empresarial a través de la tecnología.\nLa Tecnología está en nuestro ADN y creemos en ella como una palanca capaz de impulsar el cambio para mejorar, manteniendo un equilibrio que nos permite ofrecer a nuestra cartera de clientes herramientas tecnológicas de primer nivel pero siempre con la cercanía y profesionalidad de un equipo que actúa como guía durante el camino.\nDevoteam lleva más de 30 años comprometidos con la tecnología al servicio de las personas. Con más de 10.000 personas en el grupo, en 20 países de Europa, Oriente Medio y África.\n Buscamos para incorporar en proyecto estable en uno de nuestros clientes un Responsable de Ciberseguridad (CISO).\nLa modalidad de trabajo es híbrida con un 70% de presencialidad (zona Hortaleza) y resto teletrabajo.\nFunciones principales\nEstrategia y Plan Director: Definir, mantener y ejecutar el Plan Director de Ciberseguridad plurianual y su presupuesto, alineado con el negocio y con NIS2, RGPD e ISO 27001, y defenderlo ante Dirección y Consejo.\n\nCuerpo normativo y cumplimiento: Desarrollar políticas, estándares y procedimientos adaptados al grupo y a sus filiales, incluida la adecuación a NIS2 en las localizaciones europeas.\n\nRiesgos, BIA y continuidad de negocio: Gobernar la gestión de riesgos, el BIA y la continuidad de negocio con la plataforma GRC corporativa.\n\nSeguridad OT y GxP: Liderar la seguridad de planta (SCADA, segmentación IT/OT, directorio industrial) y el cumplimiento de 21 CFR Part 11 y EU GMP Anexo 11, junto con Calidad y Producción.\n\nSeguridad cloud y plataformas corporativas: Dirigir la seguridad de Microsoft 365, Entra ID y Azure (acceso condicional, PIM, Defender, Intune, Purview) y de OCI, JD Edwards y Salesforce (hardening, CIS); gobernar la seguridad del correo (SPF, DKIM, DMARC) y del perímetro y acceso remoto (Fortinet FortiSASE / FortiGate, Front Door + WAF).\n\nIncidentes y análisis forense: Gestionar incidentes (phishing, BEC, malware, endpoints comprometidos) con informes periciales y lecciones aprendidas, coordinando el SOC externalizado.\n\nDevSecOps y gobierno de la IA: Integrar la seguridad en el ciclo de desarrollo (S-SDLC, GitHub Enterprise) y definir la arquitectura y el gobierno de la IA y de los sistemas agénticos del grupo (Microsoft Foundry, Copilot, Claude, MCP).\n\nProveedores, auditorías y concienciación: Evaluar proveedores y terceros, redactar pliegos de servicios de seguridad (CTI, SOC, pentest, auditoría), coordinar auditorías, definir KPIs/KRIs para Dirección e impulsar la concienciación (campañas de phishing simulado).\n\nTecnologías\nCloud y puesto de trabajo: Microsoft 365, Entra ID (acceso condicional, PIM), Azure, Defender Suite, Intune y Purview; OCI deseable.\n\nAplicaciones corporativas: JD Edwards, Salesforce (hardening, CIS Benchmarks).\n\nPerímetro y red: Fortinet (FortiSASE, FortiGate), Azure Front Door + WAF.\n\nSeguridad y monitorización: Sophos, Tenable Nessus, ELK, SIEM / SOC, CSPM.\n\nOT / Industrial: SCADA, MES, segmentación IT/OT (IEC 62443).\n\nDesarrollo: GitHub Enterprise, DevSecOps / S-SDLC.\n\nIA: Microsoft Foundry, Copilot, Claude, MCP (OWASP Top 10 para LLM).\n\nGRC: Plataforma GRC corporativa; marcos NIS2, RGPD, ENS, NIST CSF, ISO 27001, ISO 22301, ISO 42001 / AI Act deseable.\n\nCertificaciones valorables:\nISO 27001 Lead Auditor o ISO 27001 Internal Auditor\n\nCISM, CISSP, CISA o CRISC\n\nISO 22301 Lead Implementer / Auditor e ISA/IEC 62443 (seguridad OT)\n\nMicrosoft Certified: Cybersecurity Architect Expert (SC-100) o Azure Security Engineer (AZ-500)\n\n Inglés C1","description_format":"text","description_chars":3647,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false},{"language":"Spanish","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","IT Consulting & Digital Transformation","Enterprise Apps Implementation Partners","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-27T08:42:17Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":48,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/devoteam-ciso-chief-information-security-officer","json_url":"https://alion.io/job/devoteam-ciso-chief-information-security-officer.json","meta":{"generated_at":"2026-10-29T17:19:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25913,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6640},"rest":"https://alion.io/mcp/rest/get_company?id=6640"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdevoteam-ciso-chief-information-security-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdevoteam-ciso-chief-information-security-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdevoteam-ciso-chief-information-security-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/devoteam-ciso-chief-information-security-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdevoteam-ciso-chief-information-security-officer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3322779}},{"tool":"search_jobs","arguments":{"company":"devoteam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3322779},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}