Head of Information Security (m/f/d)
1 = fulltime - unlimited
At Infront, we are committed to fostering an inclusive workplace, recognizing our diverse team as one of our most valuable assets.
For 25 years, Infront has been empowering financial market experts to make faster, smarter, compliant decisions. Over time, we have expanded our foundation by bringing together companies with more than 75 years of combined market experience and trust. All these years on, we're still building. Opening our new Madrid office this summer marks an exciting next chapter, and we're growing our team in order to write it.
Our strength lies in market data, delivering reliable, accurate information through a powerful suite of tools, spanning Data Intelligence, Wealth Management solutions, and Trading & Investor solutions, that our users depend on every day. Today, we are one of Europe’s leading providers of market data and financial software, helping professionals navigate markets with confidence and speed.
We’re seeking an experienced Head of Information Security to strengthen and improve the company’s security posture; this is a hands-on leadership role suited to someone who enjoys rolling up their sleeves, solving problems, and directly implementing improvements, rather than focusing primarily on high-level strategy. You will act as a pragmatic security leader who actively contributes to day-to-day security operations and initiatives, while also line managing 2–3 Information Security Engineers, providing guidance, support, and technical direction to drive practical security outcomes across the organisation.
Responsibilities
-
Lead a major ISO 27001 compliance programme across the organisation
-
Monitor and continuously improve the organisation’s security posture
-
Develop, maintain, and update information security policies in line with industry standards, ensuring company-wide compliance
-
Partner closely with engineering teams to embed security into software development processes
-
Ensure compliance with relevant financial services regulations and standards
-
Manage security audits and penetration testing activities
-
Implement staff training initiatives to increase security awareness (e.g. phishing, access control)
-
Hire team members and select external vendors as appropriate
-
Operate within budget constraints, leveraging open-source solutions where beneficial
-
Manage security incidents effectively, with the ability to respond quickly under pressure
-
Provide regular reporting on security status and KPIs to senior management
Requirements
-
6+ years of professional experience in cybersecurity, with at least 2 years of team leadership experience
-
Technical background in computer science, software development, or a related field
-
Proven track record of improving cybersecurity in companies with 100–1000 employees
-
Hands-on experience implementing ISO 27001
-
Expertise in risk management, including threat analysis and risk acceptance vs. mitigation
-
Familiarity with security controls in at least one major cloud platform (AWS, Azure, or GCP)
-
Strong analytical and problem-solving skills, including root cause analysis and sound build-vs-buy decision-making
-
Good understanding of GDPR regulations
-
Solid project and change management skills, with a track record of delivering initiatives to completion
-
Strong leadership skills, including for teams you do not directly manage
-
Strong communication, presentation, and stakeholder management skills, with the ability to influence without formal authority
-
Fluent in written and spoken English
Nice to have, experience with
-
DORA regulation
-
NIST Cyber security framework
-
Cyber Resiliance Act
Our offer
Health & wellness: Benefit from wellbeing initiatives tailored to local needs, including access to an employee assistance programme that provides confidential support to employees and their families.
Holiday: Enjoy competitive holiday entitlement aligned with local markets, so you can rest and recharge.
Remote work: Enjoy the opportunity to work two days a week from home, with flexible working hours where possible. You may also request to work up to four weeks per year from a different location.
Learning & development: Support your career progression with access to learning resources, ongoing conversations with your manager, and opportunities to share the knowledge you gain with your team.
Culture & impact: Be part of an international team with a startup mindset and play a key role in making a meaningful impact.
Our offices: Work from Europe’s leading financial centres and be at the heart of where finance happens.
Additional notes
All candidates selected for employment are subject to Pre-Employment Screening. This process includes professional reference and background checks conducted by our third-party partner, ZINC. These screenings are part of our commitment to ensuring a secure, compliant, and trustworthy workplace.
This position will be based in our new office in Madrid; however, we also welcome applications from candidates located in London or Oslo who have the legal right to work in their respective location.
We kindly ask that you submit your CV in English.
Spain, Madrid
Infront ASA (NOR)
English (3- Business fluent)
Larios Romo
Miriam
