Cybersecurity & IT Lead

2827602 Veridas Digital Authentication Solutions, S.L. Pamplona Headquarters IT & Operations Cybersecurity & IT Lead Your mission 1. Corporate IT Leadership and Management: Team management: Leading, supervising and coordinating the work of the technical team. Infrastructure and Assets: Organising, implementing and maintaining IT systems, networks and applications. Managing the lifecycle, procurement and supply of equipment for staff. Governance: Oversee the internal infrastructure (servers, networks and perimeter) and ensure high-quality technical support for users. 2. Cybersecurity and Risk Management: Prevention: Analyse threats, detect security breaches and implement defence mechanisms to mitigate attacks on vulnerable points. Vulnerabilities: Select and implement vulnerability management tools, establishing a schedule for scanning products and systems. Incident Management: Lead the response to security incidents to follow up on findings with product teams. Continuity: Responsible for the strategy regarding backups, restoration and disaster recovery plans. Operations and Incident Response: Active monitoring of alerts (EDR, firewalls, phishing and data breaches) to move from automatic detection to actual remediation, ensuring that confirmed threats are addressed. Infrastructure Hygiene and Vulnerabilities: Cleaning up access in the cloud (AWS/GCP), resuming asset scanning and monitoring vulnerable libraries both in the data centre and in the development pipeline. Compliance and Awareness: Managing annual training, internal safety bulletins, maintaining documentation and carrying out risk assessments. 3. Compliance: Standards: Ensure compliance with national and international standards (ISO 27001, ENS, etc.). Audits: Provide technical evidence for external audits and support the System Manager on cloud and product-related matters. Awareness: Plan and deliver security training initiatives for staff, supplemented by regular communications on best practice. ]]> Your profile Qualifications: Higher vocational training qualification or university degree relevant to the post and its duties. Will be assessed on the basis of relevant experience. Experience: 2 to 5 years Languages: Advanced English, particularly in terms of reading comprehension. Attitudes: initiative, teamwork, problem-solving, analytical skills, empathy and communication. Technical skills: Knowledge of network management, servers and perimeter security. Experience in administering identity management platforms (LDAP, OAuth2 and similar). In-depth knowledge of security standards (ISO 27001 / ENS). Experience in managing cloud infrastructure and using tools for scanning and monitoring security alerts. Furthermore, the following knowledge would be an advantage: Experience in high-availability environments and in-house technology products. Knowledge of patch automation and component lifecycle management. ]]> What we offer? A highly competitive fixed and variable salary package, commensurate with the candidate’s experience. Working from home (WFH) in accordance with company policy. A collaborative and multidisciplinary working environment. Flexible remuneration and ongoing training. ]]> permanent experienced full-time 2-5 computer_and_network_security it_software 2026-10-05T11:22:13+00:00