Governance / Risk Management Expert /Barcelona/ English/ Hybrid/ Grc Systems/
hace 4 días
D-ploy is an IT and Engineering Solutions company with operations throughout the EMEA region including Switzerland, Germany, Czech Republic, Austria, UK, as well as the USA.
We pride ourselves on delivering innovative and superior services and solutions to numerous industry-leading clients. By building relationships and trusted partnerships within the IT community, we optimize our customer's IT productivity and contribute to the organization's success and value.
We are interested in talking to engaging, flexible, and solution-oriented individuals who are looking to become a part of a dynamically growing and international organization. We are focused on creating value where IT counts, join us
Tasks and Responsibilities Support the design and improvement of the information security framework (ISF): policies, controls, procedures using the NIST Cyber Security Framework; including third party risk management.
Assess new and existing systems, data flows, business processes, and third party providers engagements and services to implement and verify compliance to the ISF reporting identified risks and issues to systems, processes and third party providers owners.
Perform information security risk assessments such as but not limited to: security business impact analysis (BIA) and business dependency analysis; security controls plans; controls maturity assessments; third party provider risk profiling, risk assessments and audits.
Maintains the information security risks and issues registers, deliver high quality reports and run information security committees meetings with business and IT mangement to manage risks.
Support the design and improvement of the third party information risk management policies, controls and procedures. Assist or lead assessment of information security risks arising from engagement with third party providers and drive remediation efforts.
Drive the design and implementation of a GRC platform including functional requirements, reviewing process designs, rolling out the new processes to the business and IT teams.
Support in the administration and maintenance of the GRC tool.
Design, improve and periodically report security key risk indicators and metrics to IT and business management to support continuous improvements and increase security maturity in our business processes.
Designs, and delivers the security education training awareness program (SETA) across all business functions. Manage external resources supporting the security awareness activities.
Desirable: Experience in implementing controls and managing compliance risks in regards to GXP regulated systems, data protection regulations such as EU and UK GDPR, CCPA, and cyber security regulations such as the EU NIS2, and the USA SEC Disclosure Requirements.
Requirements
Minimun of 10 years of professional experience in information technology, at least 3 years as an information security risk manager, preferably in a pharmaceutical, biotechnology or in other manufacturing organizations.
Bachelor's or Master's degree in information security, or in Information Technology.
Relevant information security professional certifications e.g. CISSP, CISM, CRISC, CISA, GSEC-GIAC, ISO 27001 auditor / practitioner.
Desirable: Training and or certifications in GRC platforms such as ServiceNow GRC, Archer, Metricstream; and the NIST Cyber Security Framework: Standards, Guidelines and Practises.
You are resilient and take accountability for delivering your work.
You are passionate about cybersecurity and is able to coach and help others who come from different backgrounds in information technology, compliance or information security domains.
You have a high level of personal integrity, ability to professionally handle confidential matters and convince others using appropriate level of judgment and maturity.
You have strong verbal and written communication skills in English, German is a plus.
You are a strong communicator: presentation and training, relationship management, consultation, negotiation.
You can work in a matrix and geographically dispersed organization.
All candidates must provide a Criminal record (not older than 3 months).
Benefits
Broad range of activities, tasks, and projects
Flexible working conditions
Vouchers (B-day voucher, wedding, and new born surprise)
Fishing for Friends program – our referral program
Refreshments in the D-ploy office
Further development and professional advancement
Friendly and international working environment
Company-sponsored events
Competitive salary and various benefits
Is IT in your DNA?
Original job Governance / Risk Management Expert /Barcelona/ English/ Hybrid/ GRC systems/ posted on GrabJobs . To flag any issues with this job please use the Report Job button on GrabJobs.
#J-18808-Ljbffr
-
Madrid, España D-Ploy A tiempo completo.D-ploy is an IT and Engineering Solutions company with operations throughout the EMEA region including Switzerland, Germany, Czech Republic, Austria, UK, as well as the USA.We pride ourselves on delivering innovative and superior services and solutions to numerous industry-leading clients. By building relationships and trusted partnerships within the IT...
-
Consultor/A Senior Grc
hace 1 mes
Madrid, España Kpmg Asesores Madrid A tiempo completoConsultor/a Senior GRC (Governance, Risk & Compliance)**Ubicación**:Madrid, ES, 28046**Fecha**:31 ene. 2024Entonces eres KPMG Originals. Un modo de entender la vida y tu profesión diferente desde donde marcar la diferencia. Un modo de crecer en un ambiente profesional que busca cambiar las cosas, transformar las empresas y la sociedad.Ven, alcanza tus...
-
Consultor/A Senior Grc
hace 4 semanas
Madrid, España Kpmg Asesores Madrid A tiempo completoConsultor/a Senior GRC (Governance, Risk & Compliance)**Ubicación**:Madrid, ES, 28046**Fecha**:31 ene. 2024Entonces eres KPMG Originals. Un modo de entender la vida y tu profesión diferente desde donde marcar la diferencia. Un modo de crecer en un ambiente profesional que busca cambiar las cosas, transformar las empresas y la sociedad.Ven, alcanza tus...
-
Consultor/a Senior Grc
hace 2 semanas
Madrid, España KPMG Asesores Madrid A tiempo completoConsultor/a Senior GRC (Governance, Risk & Compliance) **Ubicación**:Madrid, ES, 28046**Fecha**:31 ene. 2024Entonces eres KPMG Originals. Un modo de entender la vida y tu profesión diferente desde donde marcar la diferencia. Un modo de crecer en un ambiente profesional que busca cambiar las cosas, transformar las empresas y la sociedad. Ven, alcanza tus...
-
Manager Grc
hace 2 semanas
Madrid, España KPMG Asesores Madrid A tiempo completoManager GRC (Governance, Risk & Compliance) **Ubicación**:Madrid, ES, 28046**Fecha**:24 may. 2024Entonces eres KPMG Originals. Un modo de entender la vida y tu profesión diferente desde donde marcar la diferencia. Un modo de crecer en un ambiente profesional que busca cambiar las cosas, transformar las empresas y la sociedad. Ven, alcanza tus metas,...
-
Governance, Risk
hace 3 semanas
Madrid, España Cobee A tiempo completo**About us**: At Cobee, we believe that compensation is people’s most important financial relationship, and our vision is to become the most desirable solution for employees to get compensated at work, making them financially healthier and more engaged with their companies. To achieve it, we are radically changing the complex world of employee benefits and...
-
Digital Risk Control Expert
hace 2 semanas
Madrid, España Swiss RE A tiempo completo**Join a team of digital risk governance and security professionals helping Swiss Re to fulfil its mission in making the world more resilient. As Senior Digital Risk Control Expert, you will be responsible for supporting the effective delivery of first-line digital & technology operations risk and control activities within the reinsurance domains - ensuring...
-
Consultor/a Junior Grc
hace 1 semana
Madrid, España KPMG Asesores Madrid A tiempo completoConsultor/a Junior GRC (Governance, Risk & Compliance) **Ubicación**:Madrid, ES, 28046**Fecha**:26 jun. 2024Entonces eres KPMG Originals. Un modo de entender la vida y tu profesión diferente desde donde marcar la diferencia. Un modo de crecer en un ambiente profesional que busca cambiar las cosas, transformar las empresas y la sociedad. Ven, alcanza tus...
-
Kx506 | Director
hace 5 días
Madrid, España Jr Spain A tiempo completo.col-wideJob Description:**You Lead The Way. We've Got Your Back**At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we're supporting our customers' financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues...
-
Senior IT Governance
hace 4 días
Madrid, España Swiss RE A tiempo completoJoin a team of digital risk governance and security professionals, helping Swiss Re to fulfil its mission in making the world more resilient. **As the Digital Risk Advisor, you'll** **drive the digital risk governance process by engaging with our customers and advisors -** **primarily, in IT and business domains.** **You will own the change control to the...
-
Information Risk Management Expert
hace 1 semana
Madrid, España Ing España & Portugal A tiempo completo.At ING we are looking for Information Risk Management ExpertYour role and work environment:We are looking for a talented and enthusiastic IT Risk Management (IRM) Expert to join our Regional Information Risk Management Team in Spain (RegIRM-ES) of Information Risk / Technology Risk.The responsibility of this team is providing direct Information Risk...
-
Consultor/A Junior Grc
hace 6 días
Madrid, España Kpmg Asesores Madrid A tiempo completoConsultor/a Junior GRC (Governance, Risk & Compliance)**Ubicación**:Madrid, ES, 28046**Fecha**:26 jun. 2024Entonces eres KPMG Originals. Un modo de entender la vida y tu profesión diferente desde donde marcar la diferencia. Un modo de crecer en un ambiente profesional que busca cambiar las cosas, transformar las empresas y la sociedad.Ven, alcanza tus...
-
Consultor/a Herramientas GRC
hace 2 días
Madrid, España KPMG A tiempo completoDesde nuestro departamento de GRC (Governance Risk and Compliance) en KPMG España buscamos incorporar un/a Consultor/a en herramientas GRC con experiencia en SAP. ¿Qué necesitas saber? - Titulación de Grado en Ingeniería / Ciencias o M.Sc. o experiencia técnica relevante. - Más de dos años experiencia en implantación de Herramientas...
-
Head Of Grc
hace 1 semana
Madrid, España The Workshop A tiempo completo.The Workshop is a tech company that develops intuitive software for the online gaming industry. Our motto is to move "Fearlessly Forward" together. Cooperative innovation is at the center of everything we do - from our games, new products and technologies, to how we collaborate and share inspiration with one another.Your missionAs the Head of Governance,...
-
Cloud Security Risk Lead Assessor
hace 3 semanas
Madrid, España BNP Paribas A tiempo completoThe RISK ORM (Operational Risk Management) Technology Risk Intelligence Digital Solutions department is part of the Group Risk Functions within BNP Paribas. It is a part of the 2nd line of defence under the Bank’s Enterprise Risk Management and Chief Operational Risk Officer. The department has responsibility for identification of key technology risks to...
-
Director - Risk Management
hace 1 semana
Madrid, España Jr Spain A tiempo completocol-wideJob Description:**You Lead The Way. We've Got Your Back**At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we're supporting our customers' financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues...
-
Program Manager
hace 1 semana
Madrid, España Victoryoncology A tiempo completo.The worldwide data management software market is massive (According to IDC, the worldwide database software market, which it refers to as the database management systems software market, was forecasted to be approximately $82 billion in 2023 growing to approximately $137 billion in 2027. This represents a 14% compound annual growth rate). At MongoDB we are...
-
Manager Risk Management
hace 1 semana
Madrid, España Amex A tiempo completo**You Lead the Way. We’ve Got Your Back.**: With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create...
-
Head Risk Management
hace 4 días
Madrid, España Innovative Medicines A tiempo completo.SummaryResponsible for establishing and maintaining the risk governance framework within PS&PV including identification & management of risks within the pharmaco- and medical devices vigilance system & PV Quality Management System (QMS) for Novartis group. It includes escalating risks to senior PS&PV leadership and overseeing the development and...
-
Director of Security, Governance, Risk
hace 2 semanas
Madrid, Madrid, España Planet A tiempo completoAbout Us:The payments market is the most exciting technology market in the world today for good reason. McKinsey values it globally at over $2 trillion and it's growing between 13-15% year-on-year. Some of the largest most dynamic brands are investing in this sector; Apple has ApplePay, Google has GooglePay, Amazon has AmazonPay, and it's not just the...
