Information Security Governance Specialist

alsglobal· ALS Iberia Global Management, S.L.
Apply Now ↗
📍 Madrid, Spain

About this role

At ALS, we encourage you to dream big.

When you join us, you’ll be part of a global team harnessing the power of scientific testing and data-driven insights to build a healthier future. 

The Information Security Governance Specialist owns the governance backbone of the security programme: policy, control framework design, compliance, and audit assurance. This role translates security strategy into structured, auditable, and operationally realistic governance artefacts (e.g.: exception registers, policy suites, control frameworks, audit programmes) and works across the business to embed them into everyday operation. 

 

Key responsibilities 

  • Develop, maintain, and periodically review information security policies, standards, and procedures aligned to ISO 27001 and other recognised cybersecurity frameworks. 

  • Maintain the security governance calendar (policy reviews, management reviews). 

  • Support design and evolution of the organisation's security strategy and multi-year security programme roadmap. 

  • Administer the security exception/waiver process end-to-end: intake, documentation, approval routing, and tracking of time-bound remediation commitments through to closure. 

  • Maintain the control framework catalogue, mapping controls to ISO 27001 Annex A, NIST CSF, and CIS Controls, and flag control gaps for risk assessment by the Information Security Risk Specialist. 

  • Partner with the Information Security Risk Specialist to ensure exceptions and control gaps are risk-assessed and formally risk-accepted by the appropriate owner before a waiver is granted. 

  • Coordinate internal and external audits and certification cycles (e.g. ISO 27001), including evidence collection and remediation tracking. 

  • Map controls to regulatory and contractual obligations (GDPR, PCI-DSS, HIPAA, sector-specific requirements as applicable). 

  • Maintain a defensible audit trail for control operation and governance decisions. 

  • Produce executive-ready reporting: governance and compliance dashboards, programme status updates, board and committee papers. 

  • Act as a trusted point of contact for business units seeking governance guidance on new initiatives. 

  • Contribute governance input to post-incident reviews and remediation programmes, ensuring lessons learned convert into control or policy change. 

  • Support the broader team on cross-functional initiatives (e.g. data protection projects, security awareness) as priorities require. 

Working at ALS

The ALS team is a diverse and dedicated community united by our passion to make a difference in the world.

Our values are important to us, and shape how we work, how we treat each other and how we recognise excellence. 

At ALS, you’ll be supported to develop new skills and reach your full potential. We invest in our people with programs and opportunities that help you build a diverse career with us. 

We want everyone to have a safe, flexible and rewarding career that makes a positive impact on our people, the planet and our communities.

Everyone Matters

ALS is proud to be an equal opportunity employer and is committed to fostering an inclusive work environment where the strengths and perspectives of each employee are both recognised and valued.

ALS also welcomes applications from people with all levels of ability. Reasonable adjustments to support candidates throughout the recruitment process are available upon request. 

Eligibility
To be eligible to work at ALS you must be a Citizen or Permanent Resident of the country you are applying for, or either hold or be able to obtain, a valid working visa.

How to apply
Please apply on-line and provide a resume & cover letter that best demonstrate your motivation and ability to meet the requirements of this role.

Frequently Asked Questions

Is the salary disclosed for the Information Security Governance Specialist position at alsglobal?
The salary for this Information Security Governance Specialist role at alsglobal is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Information Security Governance Specialist position at alsglobal located?
This Information Security Governance Specialist role at alsglobal is based in Madrid, Spain. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Which team or department does the Information Security Governance Specialist at alsglobal belong to?
This Information Security Governance Specialist position is part of the ALS Iberia Global Management, S.L. department at alsglobal. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Information Security Governance Specialist position at alsglobal?
Click the "Apply Now" button on this page. You will be redirected to alsglobal's official application portal hosted on workday where you can submit your application directly.
When was the Information Security Governance Specialist job at alsglobal posted?
This Information Security Governance Specialist position at alsglobal was posted on Aug 20, 2026. Apply as soon as possible — early applications are often reviewed first.
Information Security Governance Specialist
alsglobal
Apply for this role ↗

You'll be redirected to alsglobal's official application page on Workday.