> Markdown version of [/jobs/ext/1692232-information-risk-specialist-2nd-line-of-defense](https://www.wearedevelopers.com/jobs/ext/1692232-information-risk-specialist-2nd-line-of-defense). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Risk Specialist - 2Nd Line Of Defense

- **Company:** NATIONALE - NEDERLANDEN
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Software System Penetration Testing, Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Technology Audit, IT General Controls (ITGC)
- **Published:** July 23, 2026
- **Apply:** https://www.buscojobs.com.es/information-risk-specialist-2-nd-line-of-defense-en-alcobendas-ID-364428553

## About the Role

4+ years of experience in IT Risk, Information Security, IT Audit or similar areas.
Strong understanding of security frameworks and regulatory environments.
Ability to translate technical cybersecurity risks into clear, business?focused guidance.
Confidence working with both technical and non?technical stakeholders.
Analytical mindset, curiosity and a proactive approach.
English proficiency for collaboration in an international context.

## Description

OverviewDo you want to play a key role in strengthening the digital resilience of a leading Top Employer in Spain?This position sits at the intersection of technology, security, regulation and business, bringing clarity to complex risk topics and enabling secure, responsible decision?making in areas such as cloud, AI, data protection and emerging technologies.It offers real influence, working closely with technology, security and business teams, with visibility at the senior?management level.ResponsibilitiesShaping how IT security frameworks and standards (ISO ***********, COBIT, ISF) are applied and challenged across the organisation.Translating regulations such as GDPR, DORA, EIOPA and the AI Act into practical, actionable guidance.Evaluating whether IT controls, processes and architectures effectively manage real risks.Interpreting insights from penetration tests, vulnerability scans and threat?modelling.Providing independent risk input to major technology projects and change initiatives.Reviewing incidents, remediation plans and audit findings to strengthen resilience.Assessing vendor and third?party risks together with asset owners.Acting as a trusted advisor for management and business teams on information?risk topics.Supporting AI?related initiatives from a risk and governance perspective.Qualifications4+ years of experience in IT Risk, Information Security, IT Audit or similar areas.Strong understanding of security frameworks and regulatory environments.Ability to translate technical cybersecurity risks into clear, business?focused guidance.Confidence working with both technical and non?technical stakeholders.Analytical mindset, curiosity and a proactive approach.English proficiency for collaboration in an international context.BenefitsLife insurance and pension plan.Flexible compensation, telework and meal allowance.Wellness programme, volunteering initiatives and free parking with EV charging.Continuous learning and support for security and risk certifications.In Nationale?Nederlanden we are committed to diversity and inclusion.We offer equal opportunities regardless of race, cultural background, gender, gender identity, religion, national origin, age, disability, marital status, and sexual orientation.#J-*****-Ljbffr


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023)
- [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam)
- [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam)
- [The Netherlands – Europe’s powerhouse for software development?](https://www.wearedevelopers.com/magazine/31-the-netherlands-europe-s-powerhouse-for-software-development)
- [Software Developer Salary in The Netherlands [2023]](https://www.wearedevelopers.com/magazine/217-software-developer-salary-in-the-netherlands-2023)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)