Senior Cyber GRC Specialist
Hace 2 días
Madrid, Comunidad de Madrid, España
Banco Santander
Jornada completa
Gratis con email o Google
Guarda esta oferta y sigue tu búsqueda
Crea una cuenta gratis para guardar empleos, crear alertas y volver a esta oferta desde tu panel.
Gratis con email o Google
Al continuar, aceptas nuestros Términos & Política de Privacidad.
Overview In this role you will drive the Cyber Transformation Plan within a global financial services setting, ensuring alignment with cybersecurity policies, regulatory requirements, and risk management. You will partner with local and global stakeholders to strengthen governance, risk, and compliance oversight while promoting best practices. The position offers the opportunity to influence security posture across multiple entities and geographies through standardized processes and continuous improvement. You will work on high-impact risk indicators, budgets, and regulatory controls to support secure business growth. Responsabilidades
* Report GRC status to Corporate Security Functions and Second Line of Defense
* Supervise cybersecurity plans and assist budget monitoring and optimization
* Monitor compliance with cybersecurity policies, standards, and internal controls
* Define and track KRIs, ToH maps, and cybersecurity performance metrics
* Manage Cyber Risk Lifecycle including identification, assessment, mitigation and reporting
* Coordinate local Cybersecurity Director Plans with global strategies
* Assess governance practices and propose improvements to strengthen security posture
* Promote standardization and optimization of cybersecurity services across countries
* Share best practices and ensure alignment with stakeholders
* Ensure effective implementation of cybersecurity regulations, procedures and standards Requisitos principales
* Minimum 4 years in Cybersecurity GRC, IT Risk Management, Information Security, Audit or related fields
* Experience in regulated environments
* Experience coordinating governance activities across multiple stakeholders or geographies
* Advanced English; Spanish proficiency preferred
* Strong understanding of cyber threats, vulnerabilities, and control deficiencies
* Knowledge of GRC frameworks (risk assessments, KRIs, RCSA, cyber metrics)
* Experience with audits, remediation, and recommendations (preferred)
* Understanding of budgeting concepts (CAPEX/OPEX) and vendor management (preferred)
* Knowledge of Business Continuity and resilience frameworks (preferred)
* Professional certifications such as CISSP, CISM, CISA, CEH, CSX or equivalent (preferred)
* Experience collaborating with local and global cybersecurity functions in multi-country organizations (preferred)
* Strong analytical and risk-based thinking
* Excellent stakeholder management and communication
* Governance and compliance mindset
* Cybersecurity GRC frameworks (risk assessments, KRIs, RCSA, cyber metrics)
* Knowledge of cybersecurity regulations and controls for financial institutions
* Cyber risk lifecycle management
* Report GRC status to Corporate Security Functions and Second Line of Defense
* Supervise cybersecurity plans and assist budget monitoring and optimization
* Monitor compliance with cybersecurity policies, standards, and internal controls
* Define and track KRIs, ToH maps, and cybersecurity performance metrics
* Manage Cyber Risk Lifecycle including identification, assessment, mitigation and reporting
* Coordinate local Cybersecurity Director Plans with global strategies
* Assess governance practices and propose improvements to strengthen security posture
* Promote standardization and optimization of cybersecurity services across countries
* Share best practices and ensure alignment with stakeholders
* Ensure effective implementation of cybersecurity regulations, procedures and standards Requisitos principales
* Minimum 4 years in Cybersecurity GRC, IT Risk Management, Information Security, Audit or related fields
* Experience in regulated environments
* Experience coordinating governance activities across multiple stakeholders or geographies
* Advanced English; Spanish proficiency preferred
* Strong understanding of cyber threats, vulnerabilities, and control deficiencies
* Knowledge of GRC frameworks (risk assessments, KRIs, RCSA, cyber metrics)
* Experience with audits, remediation, and recommendations (preferred)
* Understanding of budgeting concepts (CAPEX/OPEX) and vendor management (preferred)
* Knowledge of Business Continuity and resilience frameworks (preferred)
* Professional certifications such as CISSP, CISM, CISA, CEH, CSX or equivalent (preferred)
* Experience collaborating with local and global cybersecurity functions in multi-country organizations (preferred)
* Strong analytical and risk-based thinking
* Excellent stakeholder management and communication
* Governance and compliance mindset
* Cybersecurity GRC frameworks (risk assessments, KRIs, RCSA, cyber metrics)
* Knowledge of cybersecurity regulations and controls for financial institutions
* Cyber risk lifecycle management