Jobs and Careers

Senior Director Information Security

Spainfull_timeVerifiedPosted 3 Dec 2025

About the role

Senior Director Information Security – IAM

Purpose & Overall Relevance for the Organization:

The Senior director Information Security digital Identity and Access management is responsible for the selection, design, justification, implementation and operation of controls and management strategies to maintain the security, confidentiality, integrity, availability, accountability, and relevant compliance of information systems with legislation, regulation, and relevant standards.

The primary focus of the role is to set the Information security strategy for digital Identity and access management, roadmap, review existing technologies against strategy & roadmap, implement and roll out of dIAM related controls, create solution designs/standards/patterns, acting as the subject matter expert and guiding the design to meet the overall objectives for the information security domain.

Key Responsibilities:

Information security

Directs the development, implementation, delivery, and support of an enterprise information security strategy aligned to the strategic requirements of the business.
Ensures compliance between business strategies and information security and leads the provision of information security resources expertise, guidance, and systems necessary to execute strategic and operational plans across all the organization’s information systems.

Digital Identity & Access management

Provide and manage a comprehensive approach for establishing solution & standards for Identification, Authentication and Authorization for human & machine/application identities, access governance, secrets management.
Ensures the full lifecycle of the digital identity, including the technical policies, processes and execution.
Manages all digital Identity providers including the security hardening and application integrations.
Ensure the management of privileged access management of Tier 0-1-2.
Oversees the implementation of adaptive access controls and identity protection while providing standardized authentication methods to ensure seamless user experience with SSO

Consultancy

Manages provision of consultancy services, and/or management of a team of consultants.
In own areas of expertise, provide advice and guidance to consultants and/or the client through involvement in the delivery of consultancy services.
Establishes agreements/contracts and manages completion and disengagement.

Specialist advice

Provides organizational leadership and guidelines to promote the development and exploitation of specialist knowledge in the organization.
Maintains a network of recognized experts (inside and/or outside the organization) who can deliver expert advice in areas relevant to the organization’s current and future needs.
Provides input into professional development planning across a significant part of the organization to further the development of appropriate expertise.

Emerging technology monitoring

Plans and leads the identification and assessment of new and emerging technologies and the evaluation of the potential impacts, threats, and opportunities.
Creates technology roadmaps which align organizational plans with emerging technology solutions in your area
Engages with, and influences, relevant stakeholders to obtain organizational commitment to technology roadmaps.
Develops organizational guidelines for monitoring emerging technologies.
Collaborates with internal and external parties to facilitate intelligence gathering.

Security administration

Develops technical policies, standards, processes, guidelines for ensuring the physical and electronic security of automated systems.
Ensures that the policy and standards for security administration are fit for purpose, current and are correctly implemented.
Reviews new business proposals and provides specialist advice on security issues and implications.

Digital forensic

Support the incident response team with technical knowledge and understanding of the TECH landscape across functions to support incident response process.

Relationship management