Solera

Information Security Officer

Madrid Full time

Who We Are

 

Solera is a global leader in data and software services that strives to transform every touchpoint of the vehicle lifecycle into a connected digital experience. In addition, we provide products and services to protect life’s other most important assets: homes and digital identities.

Today, Solera processes over 300 million digital transactions annually for approximately 235,000 partners and customers in more than 90 countries. Our 6,500 team members foster an innovative culture focused on delivering cognitive answers, insights, algorithms, and automation to drive the future forward.

 

The Role

 

The Information Security Officer plays a critical role in strengthening and scaling Solera’s global security and compliance posture. This position is responsible for owning and advancing our Information Security Management System (ISMS), ensuring continued ISO/IEC 27001 certification, and leading the implementation of TISAX across the organization.

This role partners cross-functionally to embed security into business operations, ensuring consistent, audit-ready governance across multiple regions and business units.

 

What You’ll Do

Own and continuously enhance Solera’s ISO/IEC 27001 Information Security Management System (ISMS), including policies, controls, risk assessments, and documentation
Ensure ongoing audit readiness by coordinating internal audits, supporting external certification and surveillance audits, and driving timely remediation of findings
Lead the end-to-end implementation of TISAX, including scope definition, gap assessments, stakeholder alignment, and successful certification
Establish and maintain a robust risk management framework, ensuring risks are identified, assessed, and mitigated appropriately
Partner with IT, Engineering, Legal, Procurement, and business leaders to integrate security and compliance requirements into daily operations and third-party/vendor management
Provide guidance and education to stakeholders to promote a strong security culture and awareness across the organization
Monitor evolving regulatory and industry standards to ensure ongoing compliance and continuous improvement

 

What You’ll Bring

Proven experience managing and maintaining an ISO/IEC 27001-certified ISMS within a global or multi-entity environment
Strong understanding of information security principles, risk management, and audit processes
Experience working directly with auditors, certification bodies, and cross-functional stakeholders
Ability to translate complex security requirements into practical, business-aligned solutions
Strong organizational skills with a detail-oriented and structured approach to execution
Excellent communication skills with the ability to influence both technical and non-technical audiences
A proactive, ownership-driven mindset with the ability to operate independently and drive initiatives forward

 

It is impossible to list every requirement for, or responsibility of, any position.  Similarly, we cannot identify all the skills a position may require since job responsibilities and the Company’s needs may change over time.  Therefore, the above job description is not comprehensive or exhaustive.   The Company reserves the right to adjust, add to or eliminate any aspect of the above description.  The Company also retains the right to require all employees to undertake additional or different job responsibilities when necessary to meet business needs.