Director of Information Security

This is a fully remote position, open to applicants in Spain.

📋 Description

• Develop and execute a comprehensive security program by designing, promoting, and implementing organization-wide security solutions that align with the business strategy, emphasizing application and platform service development, technology infrastructure, and overall Cyber Security.

• Strategize the deployment of security tools by selecting specific solutions that best match Triple's processes, constraints, and objectives, along with proposing configurations. Collaborate with Engineering to implement necessary changes.

• Engage with Sales, Customer Engineering team members, and other business units to address relevant inquiries and requests related to risk and security requirements.

• Maintain proactive communication with customer security teams.

• Respond to RFPs, Questionnaires, and Forms from integrations by detailing Triple Security practices to customers.

• Champion the promotion of security practices throughout the organization.

• Collaborate with key business and IT leaders to ensure proper implementation, enforcement, and enhancement of security policies and standards.

• Coordinate with leadership across all departments on matters related to risk and security.

• Develop and implement guidelines covering risk assessments, issues and event management, impact analysis, monitoring, and reporting.

• Assess complex business challenges to ensure proper mitigation of risks and exposures.

• Identify potential vulnerabilities and risks; create and implement corrective action plans to resolve issues, offering guidance on preventing or addressing similar situations in the future.

• Lead certification processes and manage the audit structure for ISO 27001, SOC 2, GDPR, CSA, etc.

• Develop and implement security frameworks for agentic AI, creating production-grade security tools.

• Monitor AI systems to identify vulnerabilities and fraudulent activities.

⛳️ Requirements

• 5-10 years of experience in Information Security, with a minimum of 5 years in managing complex, cross-functional teams and projects.

• Proven ability to influence and lead enterprise-level change.

• Competence in effectively navigating ambiguity and complexity.

• Exceptional oral and written communication, organization, and interpersonal skills, with demonstrated effectiveness in managing complex situations.

• Experience with secure design principles, encompassing a broad knowledge of information security principles (e.g., architectural control, authorization, authentication, access control, confidentiality, integrity, etc.).

• Proficiency in conducting both risk and impact assessments and articulating issues in terms of technical and business impacts.

• Experience in implementing an effective international security program that supports the identification and application of controls, ensuring the program is recognized as a business enabler.

• Expertise in designing, implementing, and managing cloud technologies.

• Familiarity with AI/ML frameworks, data privacy techniques, cloud security, Python, Golang, JS, and container security.

• In-depth understanding of cybersecurity principles combined with specialized knowledge in machine learning models.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health benefits, including medical, dental, and vision coverage.

• Opportunities for professional development and continuous learning.

• Flexible work arrangements and a collaborative work environment.

• Access to cutting-edge technology and tools.