> Markdown version of [/jobs/ext/3509152-it-risk-compliance-associate](https://www.wearedevelopers.com/jobs/ext/3509152-it-risk-compliance-associate). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Risk & Compliance Associate - **Company:** Getnet - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Computer Engineering, Payment Systems, IT Management, Cloud Platform System, IT General Controls (ITGC), Control Structures, Cyber Threat Analysis - **Published:** September 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=5c81c3cfcbf46c75 ## About the Role * +5 years of experience in IT Risk, Cyber Risk or Technology Risk Management, preferably within financial services or regulated environments (payments industry is a plus) * Proven experience in second line of defence (risk oversight / control functions) EDUCATION Required * Bachelor's degree in Computer Engineering, Telecommunications, Mathematics, Physics, or related fields SKILLS & KNOWLEDGE * Knowledge of payments ecosystem, acquiring business and PSD2 is a strong plus * Strong knowledge of IT & Cyber Risk frameworks and standards (e.g. ISO 27001, NIST, COBIT) * Strong knowledge of Operational resilience and business continuity frameworks (i.e: DORA) and its implications on IT and Cyber risk management * Experience in: * Risk assessments (RCSA, control frameworks) * IT controls and cybersecurity practices * Cloud risk and technology environments * Familiarity with Third-party risk management with focus on IT, Cyber and resilience * Strong analytical and problem-solving skills, with the ability to translate technical risks into business impact * Ability to challenge stakeholders constructively and influence decision-making * Excellent communication skills (written and verbal), with experience interacting with senior stakeholders * High level of English DESIRED CERTIFICATIONS * CISA, CRISC, CISSP, CISM or similar * ITIL or other IT governance certifications ## Description As a Risk & Compliance Associate specialized in IT & Cyber Risk, you will play a key role in the identification, assessment, and oversight of technology and cybersecurity risks across our platforms, products, and services. You will act as a second line of defense, providing independent challenge to IT/Cyber , ensuring alignment with internal policies and regulatory requirements. We need someone like you to help us on the following fronts: * Identify, assess and monitor IT and Cyber risks across systems, platforms, and digital products * Perform independent risk oversight and challenge over IT, Cybersecurity * Contribute to the definition and evolution of the IT & Cyber Risk Management Framework, aligned with regulatory requirements (e.g. DORA) * Define and monitor Key Risk Indicators (KRIs) and support risk appetite frameworks * Assess risks related to cloud environments, infrastructure, and technology architecture * Evaluate and challenge controls design and effectiveness, ensuring proper risk mitigation * Support the identification and management of ICT third-party / vendor risks * Lead risk assessments (RCSA), control testing and risk reporting activities * Contribute to operational resilience initiatives. (identification of critical services, mapping of dependencies, testing, etc.) * Collaborate with internal stakeholders and local units to ensure consistent risk management practices across subsidiaries * Support internal and external audits and regulatory interactions when required ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [The Future of Recruiting: Innovations and Challenges in the European IT Sector](https://www.wearedevelopers.com/videos/1056-the-future-of-recruiting-innovations-and-challenges-in-the-european-it-sector) - [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career) ## Related Articles - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)