> Markdown version of [/jobs/ext/2251689-grc-cibersecurity-senior-specialist](https://www.wearedevelopers.com/jobs/ext/2251689-grc-cibersecurity-senior-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Grc Cibersecurity Senior Specialist - **Company:** Ferrovial - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Audit Trail, Microsoft Azure, Document Management Systems, Identity and Access Management, SAP ERP, SAP (Applications), SAP Implementation, Systems Integration, Google Cloud, IT General Controls (ITGC), Cyber Threat Analysis, SAPBasis, SAP S/4HANA, SailPoint - **Published:** August 26, 2026 - **Apply:** https://www.buscojobs.com.es/grc-cibersecurity-senior-specialist-en-madrid-ID-368878626 ## About the Role perform periodic access reviews with SAP Basis, business role owners* Investigate access-related incidents and firefighter usage* Maintain policies, procedures, naming standards and SoD exception handling guidelines* Develop dashboards and KPIs on risk posture, SoD trends and provisioning performance* Collaborate with Finance, Internal/External Audit, Internal Control and Compliance to align IT controls with financial process risksResponsabilidades* 7+ years in complex cybersecurity environments in large organizations* Strong hands-on SAP authorization models, SoD management and GRC controls* Experience in S/4HANA transformations* Proven track record managing full SOX audit cycles with external xqbhyrx auditors* Experience designing security governance and risk management frameworks* Familiar with GDPR, ISO ***** and NIST* Experience in security incident management, cyber intelligence, audits and reviews* Experience using AI for automation of repetitive tasks* Experience with AWS, Azure or Google Cloud security implications* Strong communication, stakeholder management and negotiation skills; English C1+* Ability to innovate, multitask and solve problems in fast-paced environmentsRequisitos principales* comprehensive benefits package* employee wellbeing initiatives* global mobility opportunities* cutting-edge productivity tools* collaborative environment* career development ## Description Experteer Overview Aunque la experiencia profesional y las cualificaciones son clave para este puesto, asegúrese de comprobar si posee las habilidades interpersonales preferibles antes de solicitar, si se requieren.In this role you will drive GRC and SOX IT controls across SAP environments, ensuring robust access governance and audit readiness.You will partner with audit, compliance and IT teams to design, implement and document controls, while leading the SoD program and applying AI-driven techniques to optimize processes.You will operate in a global, fast-paced setting, contributing to a secure, compliant IT landscape across international business units.This is a chance to shape risk management and compliance at a scale that matters for a multinational infrastructure leader.Compensaciones / Beneficios* Lead GRC and SoD initiatives aligned with business and compliance requirements* Own the SoD ruleset: analyze conflicts, simulate changes and drive remediation* Strengthen GRC controls including access governance, workflows and emergency access management* Oversee the implementation of SAP access management controls including SAP roles and authorization model* Ensure SOX compliance, maintain documentation, support audit processes and ensure audit trails* Coordinate ITGCs walkthroughs, respond to audit requests, track findings and drive deficiency closure* Use AI tools (role mining, clustering, anomaly detection) to optimize controls execution and evidence generation* Support in projects, integrations, APIs, data migrations and deployments including S/4HANA transformation and SailPoint/Pathlock integration* Govern user access lifecycle, perform periodic access reviews with SAP Basis, business role owners* Investigate access-related incidents and firefighter usage* Maintain policies, procedures, naming standards and SoD exception handling guidelines* Develop dashboards and KPIs on risk posture, SoD trends and provisioning performance* Collaborate with Finance, Internal/External Audit, Internal Control and Compliance to align IT controls with financial process risksResponsabilidades* 7+ years in complex cybersecurity environments in large organizations* Strong hands-on SAP authorization models, SoD management and GRC controls* Experience in S/4HANA transformations* Proven track record managing full SOX audit cycles with external xqbhyrx auditors* Experience designing security governance and risk management frameworks* Familiar with GDPR, ISO ***** and NIST* Experience in security incident management, cyber intelligence, audits and reviews* Experience using AI for automation of repetitive tasks* Experience with AWS, Azure or Google Cloud security implications* Strong communication, stakeholder management and negotiation skills; English C1+* Ability to innovate, multitask and solve problems in fast-paced environmentsRequisitos principales* comprehensive benefits package* employee wellbeing initiatives* global mobility opportunities* cutting-edge productivity tools* collaborative environment* career development ## Related Videos - [Headless by Design: Building Enterprise Systems That Agents Can Actually Use](https://www.wearedevelopers.com/videos/100092-headless-by-design-building-enterprise-systems-that-agents-can-actually-use) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation) ## Related Articles - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)