> Markdown version of [/jobs/ext/3250425-it-risk-compliance-associate](https://www.wearedevelopers.com/jobs/ext/3250425-it-risk-compliance-associate). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Risk & Compliance Associate

- **Company:** SIX Group
- **Location:** Boadilla del Monte, Spain
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Computer Engineering, Payment Systems, IT Management, Cloud Platform System, IT General Controls (ITGC), Control Structures, Cyber Threat Analysis
- **Published:** September 14, 2026
- **Apply:** https://www.adzuna.es/contact-us.html

## About the Role

+ +5 years of experience in IT Risk, Cyber Risk or Technology Risk Management, preferably within financial services or regulated environments (payments industry is a plus)
 + Proven experience in second line of defence (risk oversight / control functions)
EDUCATION
Required

 + Bachelor's degree in Computer Engineering, Telecommunications, Mathematics, Physics, or related fields
SKILLS & KNOWLEDGE

 + Knowledge of payments ecosystem, acquiring business and PSD2 is a strong plus
 + Strong knowledge of IT & Cyber Risk frameworks and standards (e.g. ISO 27001, NIST, COBIT)
 + Strong knowledge of Operational resilience and business continuity frameworks (i.e: DORA) and its implications on IT and Cyber risk management
 + Experience in:
 + Risk assessments (RCSA, control frameworks)
 + IT controls and cybersecurity practices
 + Cloud risk and technology environments
 + Familiarity with Third-party risk management with focus on IT, Cyber and resilience
 + Strong analytical and problem-solving skills, with the ability to translate technical risks into business impact
 + Ability to challenge stakeholders constructively and influence decision-making
 + Excellent communication skills (written and verbal), with experience interacting with senior stakeholders
 + High level of English
DESIRED CERTIFICATIONS

 + CISA, CRISC, CISSP, CISM or similar
 + ITIL or other IT governance certifications

## Description

As a Risk & Compliance Associate specialized in IT & Cyber Risk, you will play a key role in the identification, assessment, and oversight of technology and cybersecurity risks across our platforms, products, and services.
You will act as a second line of defense, providing independent challenge to IT/Cyber , ensuring alignment with internal policies and regulatory requirements.
We need someone like you to help us on the following fronts:

 + Identify, assess and monitor IT and Cyber risks across systems, platforms, and digital products
 + Perform independent risk oversight and challenge over IT, Cybersecurity
 + Contribute to the definition and evolution of the IT & Cyber Risk Management Framework, aligned with regulatory requirements (e.g. DORA)
 + Define and monitor Key Risk Indicators (KRIs) and support risk appetite frameworks
 + Assess risks related to cloud environments, infrastructure, and technology architecture
 + Evaluate and challenge controls design and effectiveness, ensuring proper risk mitigation
 + Support the identification and management of ICT third-party / vendor risks
 + Lead risk assessments (RCSA), control testing and risk reporting activities
 + Contribute to operational resilience initiatives. (identification of critical services, mapping of dependencies, testing, etc.)
 + Collaborate with internal stakeholders and local units to ensure consistent risk management practices across subsidiaries
 + Support internal and external audits and regulatory interactions when required


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career)

## Related Articles

- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)