Governance & Risk Management Consultant

Thales Spain requires a specialised support service for regulatory compliance, risk management, and cybersecurity governance. Act as a consultant, developing governance, risk management and regulatory compliance advisory projects, potentially leading their development, while expanding your knowledge of other applicable regulatory frameworks (NIST CSF, ISO 27001, ENS, ISO 22301, GDPR, PCI DSS, etc.) and evolving towards a senior role.

Job Responsabilities:

• Assess the level of regulatory compliance within companies and organisations, and support the development and monitoring of cybersecurity plans, guides, standards and guidelines.
• Capture relevant data to assess the risk level of organisations and support efforts to address risks.
• Develop a common cybersecurity model based on recognised standards and frameworks, and create materials to facilitate its deployment.
• Provide assistance in establishing and maintaining a governance framework for cybersecurity in various organisations and companies.
• Define and maintain a scorecard that provides a quantitative view of security levels.

What we need from you:

• Ability to analyse and synthesise information
• Strong interpersonal and communication skills
• Proactivity and autonomy
• Critical thinking skills Teamwork
• Commitment to continuous improvement
• A higher technical degree (in engineering or a similar subject), preferably in IT or telecommunications.
• Knowledge of cybersecurity in general.
• Experience of Governance, Risk Management and Compliance (GRC) in relation to frameworks such as PCI DSS, NIST CSF, ISO 27001, ENS, ISO 22301, NIS2 and DORA.
• Knowledge of technological cybersecurity, and experience in designing and implementing projects for deploying cybersecurity technologies. At least three years' experience in cybersecurity.
• In hybrid mode, you will work from home as well as be present at office in Vitoria

At Thales S21sec Spain we consider ourselves disruptive when it comes to organising the way we want to work. That's why we are constantly innovating our policies, to enable employees to enjoy a real work-life balance. Tell us what you want, and you will find it at Thales S21sec Spain.

• Would you like to have up to 43 days off per year? At Thales S21sec Spain you can organise your working day to increase the 24 days of holiday we offer you. How?

• You can spread your annual working hours over the year and enjoy one Friday off per month or 12 Fridays off per year.

• You can choose between an intensive working day of 7 hours a day from Monday to Friday in July and August, or continue with the same working day as before and then add 5 days off to enjoy during the current year.

• Do you want to maximise your net salary?

At Thales S21sec Spain you can decide which Flexible Remuneration package (Restaurant Card, Transport Card, Childcare Vouchers and Training Vouchers) best suits your needs.

• Do you want to continue your training and expand your certifications?

At Thales S21sec Spain you have an Annual Training Plan (based on technical certifications, languages, soft skills training...).

• Do you like to share what you learn?

At Thales S21sec Spain we count on the voluntary participation of the Speakers programme.

• Do you want to work with clear and transparent objectives?

At Thales S21sec Spain we have an Annual Bonus Policy, based on KPIs.

• Do you want to choose how to develop professionally at Thales S21sec Spain?

Because we are not all the same, at Thales S21sec Spain you can decide whether to develop your career in Cybersecurity by focusing on team management or specialise in one of the technical areas with our experts.