Cybersecurity Risk Expert - Risk Divison

Cybersecurity Risk Expert - Risk Division

Cybersecurity Risk Expert - Risk Division

Location: Boadilla del Monte

Time Type: Vollzeit

Posted On: Gestern

Job Requisition ID: Req1414431

RISK DIVISION is looking for a Cyber Security Risk Manager (2LOD) based in our Boadilla del Monte (Madrid) office.

Credit risk, interest rate risk, liquidity risk, operational risk, reputational risk... There are many types of risks, that is why their analysis and quantification is key to our purpose of being a simple, personal and fair bank.

Working at risk means doing it from a management perspective that contributes to the sustainable progress of people and businesses.

The main responsibilities of the position include:

As Cyber Security Risk Manager, you will support the development and execution of the Global 2LoD Cyber Security Risk function. The Cyber 2LoD team will provide independent assessment, challenge, and oversight of the cyber risk practices carried out by the first line of defense. We must ensure that cyber risk is managed in accordance with the risk appetite defined by senior management and promote a strong risk culture throughout the organization.

We need someone like you to help us with different tasks:

• Engage with local 2LOD to ensure alignment and common methodologies.
• Support regulatory exercises (SREP ITRQ, Cyber Stress Test, DORA TLPT,…).
• Follow up on regulatory findings (OSI, horizontal reviews,…).
• Lead deep-dive exercises for Cyber-related topics.
• Support Cyber Incident regulatory reporting.
• Support holistic and continuous monitoring of control effectiveness and risk mitigation.

Experience

• +10 years of experience in Cyber with previous experience in GRC, 2LOD, or Audit.
• Experience dealing with Internal/External auditors.
• Degree in Engineering or a comparable quantitative subject.

EDUCATION

Relevant academic qualifications in STEM (Science, Technology, Engineering, or Mathematics university degree).

SKILLS

• Proficiency in Spanish and English is a must.
• Experience using NIST, ISO, or other similar industry frameworks.
• Information security certifications are a plus (CISSP, CEH, CRISC, CCSP, CISM, CISA,…).
• Excellent interpersonal, leadership, and relationship-building skills.

OTHER INFORMATION:

If you want to know more about us, follow us on LinkedIn.