IT Risk & Compliance Associate

As a Risk & Compliance Associate specialized in IT & Cyber Risk, you will play a key role in the identification, assessment, and oversight of technology and cybersecurity risks across our platforms, products, and services. You will act as a second line of defense, providing independent challenge to IT/Cyber , ensuring alignment with internal policies and regulatory requirements. We need someone like you to help us on the following fronts:

• Identify, assess and monitor IT and Cyber risks across systems, platforms, and digital products
• Perform independent risk oversight and challenge over IT, Cybersecurity
• Contribute to the definition and evolution of the IT & Cyber Risk Management Framework, aligned with regulatory requirements (e.g. DORA)
• Define and monitor Key Risk Indicators (KRIs) and support risk appetite frameworks
• Assess risks related to cloud environments, infrastructure, and technology architecture
• Evaluate and challenge controls design and effectiveness, ensuring proper risk mitigation
• Support the identification and management of ICT third-party / vendor risks
• Lead risk assessments (RCSA), control testing and risk reporting activities
• Contribute to operational resilience initiatives. (identification of critical services, mapping of dependencies, testing, etc.)
• Collaborate with internal stakeholders and local units to ensure consistent risk management practices across subsidiaries
• Support internal and external audits and regulatory interactions when required

• +5 years of experience in IT Risk, Cyber Risk or Technology Risk Management, preferably within financial services or regulated environments (payments industry is a plus)

• Proven experience in second line of defence (risk oversight / control functions) EDUCATION Required

• Bachelor’s degree in Computer Engineering, Telecommunications, Mathematics, Physics, or related fields SKILLS & KNOWLEDGE

• Knowledge of payments ecosystem, acquiring business and PSD2 is a strong plus
• Strong knowledge of IT & Cyber Risk frameworks and standards (e.g. ISO 27001, NIST, COBIT)
• Strong knowledge of Operational resilience and business continuity frameworks (i.e: DORA) and its implications on IT and Cyber risk management
• Experience in:
• Risk assessments (RCSA, control frameworks)
• IT controls and cybersecurity practices
• Cloud risk and technology environments
• Familiarity with Third-party risk management with focus on IT, Cyber and resilience
• Strong analytical and problem-solving skills, with the ability to translate technical risks into business impact
• Ability to challenge stakeholders constructively and influence decision-making
• Excellent communication skills (written and verbal), with experience interacting with senior stakeholders

• High level of English DESIRED CERTIFICATIONS

• CISA, CRISC, CISSP, CISM or similar
• ITIL or other IT governance certifications

ADP Barcelona IT Service, Governance Risk & Compliance Specialist SIX Group AG Madrid Head of Risk & Compliance Lynx Madrid Head of Risk & Compliance 120.000 - 180.000 Lynx Tech Madrid, Comunidad de Madrid Head of Risk & Compliance 120.000 - 160.000 Infront Madrid, Comunidad de Madrid Volver a la última búsqueda Trabajos ) IT Risk & Compliance Associate ( volver a la última búsqueda Recibir ofertas similares por correo electrónico No gracias, llévame a la oferta de empleo Al crear una alerta, aceptas nuestros Términos y condiciones y Política de privacidad, y el uso de cookies. Inscribirse en esta oferta

Profesiones

• Técnico
• Recepciónista
• Administrador
• Ventas
• Enfermero