> Markdown version of [/jobs/ext/4149962-business-information-risk-manager](https://www.wearedevelopers.com/jobs/ext/4149962-business-information-risk-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Business Information Risk Manager

- **Company:** Cognizant
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Technology Audit, PCI Data Security Standards, Information Security Management System
- **Published:** October 14, 2026
- **Apply:** https://dejobs.org/x/x/FB66DD95F27E41388EFBCD5549F4AA4D/job/

## About the Role

* Experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or a related discipline.
 * Strong understanding of ISO 27001 Information Security Management Systems and risk assessment methodologies.
 * Experience working with security frameworks such as ISO 27001, NIST, or ISF.
 * Knowledge of technology risk management within enterprise environments.
 * Experience supporting audits, compliance activities, or security governance programs.
 * Excellent communication and stakeholder management skills.
 * Professional working proficiency in both English and Spanish, * Security certifications such as CISSP, CISM, CISA, or equivalent (or currently pursuing certification).
 * Knowledge of GDPR and EU data protection requirements.
 * Understanding of SOC 1, SOC 2, SSAE/ISAE3402, and PCI-DSS frameworks.
 * Basic knowledge of network and systems security technologies and practices., * Thinks strategically and takes a proactive approach to problem-solving.
 * Demonstrates sound judgement and attention to detail.
 * Can communicate complex technical concepts to both technical and non-technical audiences.
 * Thrives in a collaborative, international environment.
 * Is comfortable working independently and managing multiple priorities.
 * Is willing to travel occasionally (up to 10%).

## Description

The Business Information Security (BIS) team plays a critical role in ensuring security risks across business delivery and client engagements are effectively managed end-to-end. As a Business Information Risk Manager, you will act as a trusted advisor to business stakeholders, helping to strengthen security governance, drive compliance initiatives, and support risk management activities across multiple client environments and corporate functions., * Manage information security and compliance risks across business operations and service delivery.

 * Partner with business stakeholders to understand critical security requirements and emerging risk scenarios.
 * Lead risk assessments and control reviews for strategic client accounts.
 * Provide recommendations to mitigate identified risks and strengthen security controls.
 * Support security incident investigations and coordinate with incident management teams when required.
 * Conduct annual security risk assessments and ongoing compliance activities.
 * Lead and coordinate ISO 27001 audit activities, working closely with auditors and internal stakeholders.
 * Ensure systems, processes, and policies align with ISO 27001 requirements, applicable regulations, and industry standards.
 * Collaborate with cross-functional teams including Legal, HR, Privacy, IT, and business leadership.
 * Evaluate compliance with contractual security obligations, internal policies, and regulatory requirements.