IT Risk Compliance Analyst

**Company Description**

**_Why Talan?_**

**Talan - Positive Innovation**

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, we are committed to delivering impactful, future-ready solutions.

**Talan at a Glance**

Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we’ve built a strong presence in the IT and consulting landscape, and we’re on track to reach €1 billion in revenue this year.

**Our Core Areas of Expertise**

- **Data & Technologies**:We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI.

- **Cloud & Application Services**:We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency.

- **Management & Innovation Consulting**: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies.

**We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.**

We are looking for an **IT Risk & Compliance Analyst** to join our cybersecurity and governance team in Málaga.

This position involves close collaboration with software engineers, architects, and security specialists across international teams.

**Responsibilities**

- Advise and guide development teams in the adoption of secure software practices.

- Integrate and manage security tools such as **SCA**, **SAST**, **DAST**, **CSPM**, and **Container Security** solutions.

- Track, prioritize, and support the remediation of identified vulnerabilities, validating false positives where applicable.

- Participate in architecture reviews and define security requirements for new or evolving systems.

- Contribute to continuous improvement initiatives in the organization’s security posture and development lifecycle.

**Qualifications**

**Experience**:

- 1-3 years of professional experience in software development, IT security, or risk management.

- Hands-on experience with **Docker**, **Kubernetes**, and container ecosystems.

- Experience with security analysis tools for code and container scanning.

**Education**:

- Bachelor’s Degree in Computer Science, Engineering, or a related technical discipline.

**Skills & Knowledge**

**Technical**:

- Familiarity with DevSecOps practices and CI/CD security integration.

- Knowledge of SDLC processes and risk assessment methodologies.

- Exposure to **cloud environments (AWS, Azure, GCP)** is highly desirable.

**Soft Skills**:

- Strong communication and teamwork abilities.

- Analytical mindset and attention to detail.

- Proactive approach to learning and adapting to emerging threats.

**Nice to Have**

- Security certifications such as **OSCP, CKA, CKS, CISSP**, or equivalent.

- Previous experience in regulated sectors such as **fintech or financial services**.

- Technical curiosity, problem-solving attitude, and a passion for cybersecurity.

**What We Offer**

- Full-time, permanent position.

- Hybrid work model (Málaga-based).

- Opportunity to grow in a multicultural, international environment.

- Smart Office Pack for flexible remote work.

- Continuous training and professional development.

- Comprehensive benefits including private medical and life insurance.

- Exposure to global cybersecurity and risk management projects.

If you have read this far and you are looking forward to joining this challenge, do not hesitate to apply... we would be delighted to meet you

LI-CL1