knowmad mood is a leading Spanish technology consulting firm specializing in digital transformation, software development, and IT strategy. With a workforce of over 2,500 professionals, the company provides high-impact services across various sectors including banking, insurance, and retail, helping organizations navigate complex technological shifts through innovation and agile methodologies.

Headquartered in Madrid, the company maintains a significant presence across Spain with multiple regional hubs and a strong culture of remote work. For international professionals, knowmad mood is an attractive employer due to its involvement in large-scale international projects, frequent requirements for English-speaking talent, and a flexible "work from anywhere" policy for many of its technical roles.

Founded in 1994 as atSistemas, the company rebranded to knowmad mood in 2023 to reflect its international expansion and digital transformation focus. It is currently listed on the BME Growth market and continues to grow through both organic development and strategic acquisitions.

For international professionals

Offers a high volume of 100% remote roles, allowing employees to live anywhere in Spain.
Many positions specifically require high English proficiency (C1 level), making it accessible for international talent.
Publicly traded on the BME Growth market, indicating financial stability and corporate transparency.
Operates multiple physical offices in major Spanish cities including Madrid, Barcelona, and Palma de Mallorca for those preferring hybrid work.
Actively hires for modern tech stacks including AI, Cloud (AWS/Azure), and DevOps.

🔐 GRC Cybersecurity Expert (ISO 27001 & ENS) – 100% remote work

knowmad mood

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

We are knowmad mood!

We are a leading digital transformation company, constantly evolving and at the forefront of technology. We were born to provoke real change through innovation and sustainable development, with the mission of adding value to clients and driving our talent.

Made up of more than 3,000 creative, digital, and innovative people connected to a purpose and capable of generating connections with people all over the world. A responsible, flexible team with a high capacity to adapt to the needs of our clients and the market, while providing value, vision, creativity, expertise, professionalism, and a passion for technology in every project.

The values that mark our course and guide us toward excellence are collaboration, innovation, commitment, fun, and trust.

🎯 What will be your mission?

We are looking for a senior Cybersecurity Governance (GRC) expert to take full responsibility for the ISMS and lead regulatory compliance and ENS recertification processes in a highly regulated corporate environment.

You will join us to fill a critical role requiring total autonomy from day one, actively participating in improving the organization's security posture.

What will be your mission?

Lead the governance of the Information Security Management System (ISMS)
Manage ENS (National Security Framework) certification and recertification processes
Define, implement, and maintain security policies, regulations, and procedures
Design and execute cybersecurity master plans
Comprehensive management of information security risks
Define and monitor KPIs / KRIs and executive reporting
Liaise with internal stakeholders and provide support during audits
Develop strategic roadmaps aligned with the business

Essential Requirements

Solid experience (+5 years) in GRC and cybersecurity governance
Demonstrable experience in:
- ISO 27001 (implementation, maintenance, and auditing)
- ENS (experience leading certifications or recertifications is highly valued)
- ISMS Management
Experience in regulated environments (insurance, banking, public sector, etc.)
Ability to work with high autonomy and responsibility
Experience in defining security policies and risk management

⭐ Desirable Requirements

Certifications:
- ISO 27001 Lead Auditor / Lead Implementer
- CISM, CISSP or other related certifications
Experience with frameworks:
- NIST, ISO 27005, ISO 31000
Experience in leadership or governance roles

🧠 Key Competencies

Strategic vision and business orientation
Ability for leadership and influence
Decision-making skills
Excellent communication skills
Proactivity and autonomy

And with us, you can enjoy:

✅ Permanent Contract

✅ 100% REMOTE

✅ Internal training and access to certifications ♻ Check our calendar here:

https://www.knowmadmood.com/es/talento/formacion

✅ Flexible remuneration plan (health insurance, transport, childcare vouchers, restaurant vouchers)

✅ Brand Ambassador through our referral plan

Recommend your friends and get an extra bonus!

✅ Events, meetups, techdays, talks... and much more!

✅ 26 days of rest (22 vacation days, 2 personal days, and December 24th and 31st as default holidays)

✅ Schedule: 8:30 AM to 6:00 PM (flexible) Mon-Thu and Fri 8:00 AM to 3:00 PM, and Summer Intensive in July and August from 8:00 AM to 3:00 PM

To stay up to date with our news, follow us here -> knowmad mood

At knowmad mood we are committed to equal opportunity and respect for diversity. We apply our Equality Plan and the principle of non-discrimination in all our selection processes.

View original advert (Spanish)

We are knowmad mood!

Somos una compañía líder en transformación digital, en constante evolución y a la vanguardia de la tecnología. Nacimos para provocar un cambio real a través de la innovación y el desarrollo sostenible, con la misión de aportar valor a los clientes e impulsar nuestro talento.

Formado por más de 3.000 personas creativas, digitales e innovadoras conectadas a un propósito y capaces de generar conexiones con personas de todo el mundo. Un equipo responsable, flexible y con alta capacidad de adaptación a las necesidades de nuestros clientes y del mercado, a la vez que proporciona valor, visión, creatividad, expertise, profesionalidad y pasión por la tecnología en cada proyecto.

Los valores que marcan nuestro rumbo y nos guían hacia la excelencia son la colaboración, la innovación, el compromiso, la diversión y la conﬁanza.

🎯 ¿Cuál será tu misión?

Buscamos un/a experto/a senior en Gobierno de Ciberseguridad (GRC) que asuma la responsabilidad completa del SGSI y lidere procesos de cumplimiento normativo y recertificación ENS en un entorno corporativo altamente regulado.

Te incorporarás para cubrir un rol crítico con necesidad de autonomía total desde el primer día, participando activamente en la mejora de la postura de seguridad de la organización.

¿Cuál será tu misión?

Liderar el gobierno del Sistema de Gestión de Seguridad de la Información (SGSI)
Gestionar procesos de certificación y recertificación ENS (Esquema Nacional de Seguridad)
Definir, implantar y mantener políticas, normativas y procedimientos de seguridad
Diseñar y ejecutar planes directores de ciberseguridad
Gestión integral de riesgos de seguridad de la información
Definir y monitorizar KPIs / KRIs y reporting ejecutivo
Interlocución con stakeholders internos y soporte en auditorías
Elaboración de roadmaps estratégicos alineados con negocio

Requisitos imprescindibles

Experiencia sólida (+5 años) en GRC y gobierno de ciberseguridad
Experiencia demostrable en:
- ISO 27001 (implantación, mantenimiento y auditoría)
- ENS (muy valorable haber liderado certificaciones o recertificaciones)
- Gestión de SGSI
Experiencia en entornos regulados (seguros, banca, sector público, etc.)
Capacidad para trabajar con alta autonomía y responsabilidad
Experiencia en definición de políticas de seguridad y gestión de riesgos

⭐ Requisitos valorables

Certificaciones:
- ISO 27001 Lead Auditor / Lead Implementer
- CISM, CISSP u otras relacionadas
Experiencia en frameworks:
- NIST, ISO 27005, ISO 31000
Experiencia en roles de liderazgo o gobierno