Information Security Consultant at SGS

Department: Certification, Consulting, Training and Other ServicesSeniority in posting: senior

Language

Setup: On-site
Location: Madrid, Community of Madrid
Type: Full-time
Level: mid
Posted: Jul 30, 2026

Description

SGS is hiring an Information Security Consultant for its Madrid team to execute GRC, Blue Team, and Red Team consulting projects; analyze information security risks and the effectiveness of organizational and technical controls; identify nonconformities and improvement opportunities; prepare reports for stakeholders; and participate in continuous development and internal or external events. The role requires a relevant university degree, ISO 27001 Lead Auditor or Lead Implementer certification, and 2 to 4 years of cybersecurity, consulting, or information security audit experience, with CISA, CISM, or CISSP certification advantageous.

Required Skills

GRC
Blue Team
Red Team
Risk analysis
Security audits
Data protection
Risk management

Additional Information

Minimum Education: University degree in Computer Science, Telecommunications, Cybersecurity, Law, or Business Administration and Management (ADE).
Required Previous Experiences: 2 to 4 years of cybersecurity, consulting, or information security audit experience, plus knowledge of data protection and risk management.
Preferred Qualifications: CISA, CISM, or CISSP certification.
ISO 27001 Lead Auditor or Lead Implementer certification.
Translation Company Name: SGS