Cybersecurity Project Manager

Description

Company Description Why work at Sopra Steria? Because working at Sopra Steria also means feeling **Sopra Steria**. We are a recognized European leader in consulting, digital services, and software development, with nearly 56,000 employees across almost 30 countries and over 4,000 in Spain. We focus on people—on their training and professional development—which drives our continuous growth and improvement. We are passionate about the digital world, and just like you, we seek the greatest adventure. We want your everyday experience to become your greatest source of inspiration—to learn, contribute, have fun, grow, and above all, enjoy yourself to the fullest. If you want to join a “**Great Place to Work**” team, keep reading! Job Description We are seeking a **Senior Cybersecurity Consulting and Project Management profile specialized in the National Security Scheme (ENS)**, with proven experience in ENS alignment, implementation, and certification projects within public administration or highly regulated sectors. A **high level of English and Catalan is required.** **Hybrid work model** in **L'Hospitalet de Llobregat** **Office hours** Requirements * Minimum 5 years’ experience in cybersecurity, regulatory compliance, and security governance projects. * Experience leading ENS alignment projects and other regulatory frameworks. * Experience coordinating multidisciplinary teams and managing stakeholders. * Participation in security certification and audit projects. **Regulatory Compliance and Risk Management** Implementation and maintenance of Information Security Management Systems (ISMS). Experience with ENS, ISO 27001, ISO 22301, GDPR/LOPDGDD, and CCN\-CERT standards. Conducting security audits (ENS, ISO 27001, or similar). Executing risk analysis and management using CCN\-CERT, MAGERIT, ISO 27005, or equivalent methodologies. Developing and monitoring risk treatment plans. Governance and Management Defining and implementing metrics, KPIs, and dashboards. Preparing executive, operational, and progress reports. Managing and monitoring cybersecurity action plans. Administrative and documentation support for committees and follow-up meetings. **Technology and Tools** Experience with Microsoft 365 platforms: SharePoint Online. Power Automate. Power BI. Document management and workflow automation. Creating dashboards and reports for indicator tracking. **Education and Certifications** Bachelor’s or Engineering degree in Computer Science, Telecommunications, Computer Engineering, or equivalent. Valid certification: ISO/IEC 27001 Lead Implementer or ISO/IEC 27001 Lead Auditor. Additional Information What do we offer you? * Indefinite contract and full-time schedule * 23 vacation days * Continuous training: technical, transversal, and language skills. Access to certifications, training from major Technology Partners, online platforms—and much more! * Life and accident insurance * Option to enroll in our flexible compensation plan (health insurance, childcare vouchers, transportation, meal vouchers, and training) * Access to the Privilege Club, offering attractive discounts with leading brands * Personalized and detailed onboarding. We support you every step of the way so you feel \#soprano from day one. * Office featuring dedicated leisure spaces—where work and fun come together! * Camaraderie and a positive atmosphere—we truly believe in the power of unity. And most importantly… You’ll have the opportunity to build your professional career with us: Together, we’ll create a personalized career plan. You’ll receive training, set goals, and undergo regular follow-ups to ensure we achieve them together. We listen to your priorities and actively advocate for them. Your voice matters here! Join us and be part of something greater! **The world is how we shape it** At Sopra Steria, we are committed to building a diverse and inclusive environment, evaluating each candidate objectively based on competencies and experience. We firmly believe that diversity of experience and perspective fuels our innovation.