Cybersecurity Strategy Consultant – Business Continuity

About the role

Capgemini Invent is seeking a Cybersecurity Strategy Consultant to join its Digital Trust department in Barcelona. You will help CIOs, CISOs and DPOs strengthen information security and business continuity through the design and implementation of advanced security frameworks.

Key responsibilities

• Implement Information Security Management Systems (ISO 27001) and Business Continuity Management Systems (ISO 22301).
• Apply regulatory frameworks such as NIST, ENS, DORA, GDPR, PCI‑DSS and PSD2.
• Define security requirements for services and development projects.
• Conduct risk assessments using MAGERIT, OCTAVE and ISO 31000.
• Develop strategic security plans, governance models and KPI/KRI/KGI scorecards.
• Perform offensive security testing and security audits.
• Create and deliver security training and awareness programs for staff and senior management.

Required profile

• Bachelor’s or Master’s degree in Computer Engineering, Telecommunications, Cybersecurity, Mathematics, Statistics or a related field.
• 2‑4 years of experience in strategic cybersecurity, preferably in consulting or IT project environments.
• Fluent in Spanish and English; Catalan preferred for Barcelona applicants.
• Willingness to work onsite in Barcelona or relocate.

Required skills

• ISO 27001 implementation
• ISO 22301 implementation
• Knowledge of NIST, ENS, DORA, GDPR, PCI‑DSS, PSD2
• Risk assessment methodologies: MAGERIT, OCTAVE, ISO 31000
• Offensive security testing
• Security audit execution
• KPI/KRI/KGI definition and monitoring
• Security governance and policy development
• Training and awareness program design

What we offer

• Opportunities to obtain certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor/Implementer, ISO 22301 Lead Auditor/Implementer.
• Exposure to multiple industry sectors and large‑scale transformation projects.
• Collaborative, innovative work environment within a global consulting leader.