> Markdown version of [/jobs/ext/1614568-ip-analyst-with-data-security](https://www.wearedevelopers.com/jobs/ext/1614568-ip-analyst-with-data-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Ip Analyst With Data Security - **Company:** Infinity Quest - **Location:** Málaga, Spain - **Contract:** Permanent contract - **Skills:** Confluence, JIRA, Microsoft Azure, Software Bug Management, Data Transmissions, Data Loss, Data Security, Identity and Access Management, Key Management, Software Requirements Analysis, Data Streaming, Test Case, Workflow Management Systems, Data Classification - **Published:** July 31, 2026 - **Apply:** https://www.buscojobs.com.es/ip-analyst-with-data-security-en-malaga-ID-364166320 ## About the Role Life Sciences/Pharma Context: Familiarity with Pharma data use cases and cross border data transfer controls. Information Protection Expertise: Practical experience with the concepts of (but no hands-on experience needed) data classification, DLP, encryption/key management, identity and access management, data loss monitoring, and secure collaboration; understanding of information risk methodologies. Regulatory & Compliance Awareness: Working knowledge of privacy/security obligations and control frameworks (e.g., GDPR, SCCs, ISO *****, NIST), and how they translate into enterprise controls and testing. Business Analysis: Strong elicitation, process mapping, requirements writing (epics/stories/use cases), and acceptance criteria; proficiency with traceability and documentation. Backlog & Impact Management: Ability to prioritize using structured criteria (value, risk, effort, user impact), run backlog refinement, and prepare changes for gated delivery. User Testing & Adoption: Experience planning and coordinating UAT/pilots, writing test cases, managing defects, synthesizing feedback, and enabling adoption with minimal friction. Governance Navigation: Experience moving changes through design authority, security/compliance reviews, risk assessments (e.g., PIA/eRID), and operational readiness, with clear evidence for audit. Stakeholder Management: Confident communicator able to balance IT, Compliance, Business, and user needs; skilled in facilitation and consensus building. Delivery Orientation: Comfortable working in agile/hybrid environments, aligning iterative delivery with compliance checkpoints. Analytical & Communication Skills: Clear written and verbal communication; data driven decision making; concise reporting to senior stakeholders. Desirable Tooling Exposure: Experience with workflow tools (e.g., Azure DevOps/Jira, Confluence, Airfocus). Risk & Data Assessments: Hands on with DPIAs, TRA/RA, control testing, and evidence collection for audits. User Research Methods: Ability to run lightweight usability studies, surveys, and feedback cycles to inform control design. ## Description 3 days a week from the office.LocationBarcelona, SpainRoleIP Analyst with Data SecurityMandatory RequirementsInformation Protection Analyst (not a regular BA role) and Data Security, relevant domain experience.Role PurposeThe Business Analyst will support the Project Manager to deliver enterprise Information Protection change initiatives. The role focuses on stakeholder and user engagement, detailed requirements analysis (technology and process), backlog management with impact assessment, user testing coordination, and progressing governance to enable compliant, risk reducing delivery.Key ResponsibilitiesStakeholder & User Engagement: Partner with IT, Compliance, and Business stakeholders (via SDOs) and end users to elicit needs, validate usability, align priorities, and secure decisions; facilitate workshops, interviews, user forums, and working groups.Backlog Management: Maintain and prioritize the change backlog using transparent criteria; drive refinement, readiness, and clear acceptance criteria for delivery.Impact Assessment: Evaluate each change for business value, risk reduction, effort to deliver, and operational/user impact; document assumptions, dependencies, and measurable outcomes.Requirements Definition (Tech & Process): Produce detailed, testable requirements and user stories covering controls, data flows, roles/responsibilities, operating procedures, integration points, and user experience; ensure traceability from business need to acceptance criteria.User Testing Coordination: Plan, coordinate, and execute user testing (UAT, pilot, and usability testing), including test scenarios, scripts, and data; manage defect triage, feedback capture, and sign off, ensuring control effectiveness and positive user experience.Governance Progression: Navigate and advance required governance (e.g., design authorities, risk/compliance reviews, data protection assessments, control sign offs) to unblock delivery and ensure auditability.Delivery Support: Collaborate with engineering and operations to clarify scope, support solution design, and validate implementation against requirements and user feedback; prepare readiness materials for adoption.Adoption & Change Readiness: Work with change/communications teams to craft user centric guidance, FAQs, and training; track adoption metrics and drive remediation actions where needed.Measurement & Reporting: Define success metrics, track risk reduction, usability outcomes, and business benefits; provide concise status reporting to the Project Manager and stakeholders.Required Experience & SkillsLife Sciences/Pharma Context: Familiarity with Pharma data use cases and cross border data transfer controls.Information Protection Expertise: Practical experience with the concepts of (but no hands-on experience needed) data classification, DLP, encryption/key management, identity and access management, data loss monitoring, and secure collaboration; understanding of information risk methodologies.Regulatory & Compliance Awareness: Working knowledge of privacy/security obligations and control frameworks (e.g., GDPR, SCCs, ISO *****, NIST), and how they translate into enterprise controls and testing.Business Analysis: Strong elicitation, process mapping, requirements writing (epics/stories/use cases), and acceptance criteria; proficiency with traceability and documentation.Backlog & Impact Management: Ability to prioritize using structured criteria (value, risk, effort, user impact), run backlog refinement, and prepare changes for gated delivery.User Testing & Adoption: Experience planning and coordinating UAT/pilots, writing test cases, managing defects, synthesizing feedback, and enabling adoption with minimal friction.Governance Navigation: Experience moving changes through design authority, security/compliance reviews, risk assessments (e.g., PIA/eRID), and operational readiness, with clear evidence for audit.Stakeholder Management: Confident communicator able to balance IT, Compliance, Business, and user needs; skilled in facilitation and consensus building.Delivery Orientation: Comfortable working in agile/hybrid environments, aligning iterative delivery with compliance checkpoints.Analytical & Communication Skills: Clear written and verbal communication; data driven decision making; concise reporting to senior stakeholders.DesirableTooling Exposure: Experience with workflow tools (e.g., Azure DevOps/Jira, Confluence, Airfocus).Risk & Data Assessments: Hands on with DPIAs, TRA/RA, control testing, and evidence collection for audits.User Research Methods: Ability to run lightweight usability studies, surveys, and feedback cycles to inform control design.Email -#J-*****-Ljbffr ## Related Videos - [AIQSpecFlow: Improves and automates your agile process of specification and creation of testcases.](https://www.wearedevelopers.com/videos/100084-aiqspecflow-improves-and-automates-your-agile-process-of-specification-and-creation-of-testcases) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [How to Avoid LLM Pitfalls - Mete Atamel and Guillaume Laforge](https://www.wearedevelopers.com/videos/1328-how-to-avoid-llm-pitfalls-mete-atamel-and-guillaume-laforge) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)