Information Security Engineer

If you are passionate about 🔎 information security, risk analysis and compliance, GMV is your place!

We are expanding our teams in the 🛡️ defense and security sector to participate in projects related to information security. We´ll get to the point; we'll tell you what's not on the web. If you want to know more about us go to GMV website

WHAT CHALLENGE WILL YOU BE TAKING ON? In our defense and security team you will be able to participate in activities related to the certification and accreditation processes of IT Information and Communication Systems for the management of classified information, performing tasks such as:

📋 Preparation and support for the certification and accreditation process of Information and communications Systems at the different levels of National/European classification.

🛡️ Vulnerability Assessments.

💼 Analysis and identification of security risks of Communications Information Systems and proposal of an appropriate mitigation plan.

📜 Definition of Information Security Policies and Procedures for the operation of Information and Communications Systems according to the applied security frameworks.

📑 Preparation and maintenance of security documentation for Information and Communications Systems.

📊 Preparation and analysis of results of Information Security Audits .

WHAT DO WE NEED IN OUR TEAM? For this position, we are looking for engineers with demonstrable experience and with :

🌍 Good level of English and Spanish (at least B2)

📜 Knowledge of international Information Security (ISO 27001, ISO 22301, NIST 800-53, COBIT).

🤝 Excellent interpersonal and communication skills to work with people with different IT backgrounds and skills, to motivate others and change people's attitudes when necessary.

🧩 Strong analytical and problem-solving skills, as well as the ability to work with complex and ambiguous contexts and facilitate strategic decisions.

We also value knowledge in:

🎯 Valuable certificates: CISSP, CISA, CISM (or equivalent)

💡 National Security Scheme (ENS) and CCN-STIC.

📜 Knowledge of a Risk Analysis methodology such as MAGERIT, ISRM, EBIOS or others.

WHAT DO WE OFFER? 💻 Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area. 🕑 Flexible start and finish times , and intensive working hours Fridays and in summer.

🚀 Personalized career plan development, training and language learning support.

🌍 National and international mobility . Do you come from another country? We can offer you a relocation package .

💰 Competitive compensation with ongoing reviews , flexible compensation and discount on brands.

💪Wellbeing program: Health, dental and accident insurance; free fruit and coffee , physical, mental and financialhealth training, and much more!

⚠️ In our recruitment processes you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through any other process, please write to our team at [email protected]

❤️We promote equal opportunities in recruitment, and we are committed to inclusion and diversity.

WHAT ARE YOU WAITING FOR? JOIN US If you have any questions please do not hesitate to contact Clara Sanchez Lobato , in charge of this vacancy.

Clara Sanchez Lobato