IT Risk Compliance Analyst

 Why Talan?

Talan – Positive Innovation

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, we are committed to delivering impactful, future-ready solutions.

Talan at a Glance

Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we've built a strong presence in the IT and consulting landscape, and we're on track to reach €1 billion in revenue this year.

Our Core Areas of Expertise

• Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI.

• Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency.

• Management & Innovation Consulting: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies.

We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.

We are looking for an IT Risk & Compliance Analyst to join our cybersecurity and governance team in Málaga.

In this role, you will be responsible for ensuring the security and compliance of applications and containerized environments, advising development teams on secure coding practices, and driving continuous improvement in risk management processes.

This position involves close collaboration with software engineers, architects, and security specialists across international teams.

Responsibilities

• Govern and manage vulnerabilities across applications and containerized environments (Docker, Kubernetes).

• Conduct risk assessments for new applications from the design phase, including threat modeling.

• Advise and guide development teams in the adoption of secure software practices.

• Integrate and manage security tools such as SCA, SAST, DAST, CSPM, and Container Security solutions.

• Track, prioritize, and support the remediation of identified vulnerabilities, validating false positives where applicable.

• Participate in architecture reviews and define security requirements for new or evolving systems.

• Contribute to continuous improvement initiatives in the organization's security posture and development lifecycle.

Qualifications

Experience:

• 1–3 years of professional experience in software development, IT security, or risk management.

• Hands-on experience with Docker, Kubernetes, and container ecosystems.

• Experience with security analysis tools for code and container scanning.

Education:

• Bachelor's Degree in Computer Science, Engineering, or a related technical discipline.

Skills & Knowledge

Technical:

• Understanding of application security principles, secure coding, and vulnerability management.

• Familiarity with DevSecOps practices and CI/CD security integration.

• Knowledge of SDLC processes and risk assessment methodologies.

• Exposure to cloud environments (AWS, Azure, GCP) is highly desirable.

Soft Skills:

• Strong communication and teamwork abilities.

• Analytical mindset and attention to detail.

• Proactive approach to learning and adapting to emerging threats.

Nice to Have

• Security certifications such as OSCP, CKA, CKS, CISSP, or equivalent.

• Previous experience in regulated sectors such as fintech or financial services.

• Technical curiosity, problem-solving attitude, and a passion for cybersecurity.

What We Offer

• Full-time, permanent position.

• Hybrid work model (Málaga-based).

• Opportunity to grow in a multicultural, international environment.

• Smart Office Pack for flexible remote work.

• Continuous training and professional development.

• Comprehensive benefits including private medical and life insurance.

• Exposure to global cybersecurity and risk management projects.

If you have read this far and you are looking forward to joining this challenge, do not hesitate to apply... we would be delighted to meet you  

#LI-CL1