3rd Party Cyber & Technology Risk Auditor

HN Services España; Madrid; Hybrid; EUR 40,000 - 60,000; Full time

Benefits offered by this job

Hybrid work model (50% in Madrid)

Travel opportunities

Job summary

HN Services España is seeking a 3rd Party Cyber & Technology Risk Auditor to support an international project in the financial services sector. You will assess and govern IT and cybersecurity risks across third parties, helping to ensure secure and resilient operations in a complex, global environment.

Based in Madrid and adopting a 50% hybrid working model, you will lead stakeholder discussions across countries, review control evidence, test controls, and prepare reports highlighting key risks

Qualifications

• Proven experience in risk governance, IT controls and cybersecurity.
• Knowledge of information security and cybersecurity risks.
• Experience using data analysis to assess risks, scope audits and test controls.
• Familiarity with ISO 27001, ISO 22301, ISO 9001 and relevant cybersecurity or governance frameworks.
• Proactive, autonomous and analytical with a client-focused and solutions-oriented approach.
• English – B2 level or higher (mandatory).

Responsibilities

• Lead and coordinate meetings with stakeholders across different countries.
• Assess third parties’ cybersecurity maturity.
• Review evidence supporting third-party responses to control questionnaires.
• Analyse data to assess risks, define audit scope and test controls.
• Prepare reports and consolidate key risks and findings.

Skills

Risk governance

IT controls

Cybersecurity

Information security

Data analysis

ISO 27001 familiarity

English B2

Job description

We’re looking for a 3rd Party Cyber & Technology Risk Auditor to join our team supporting an international project in the financial services sector.

In this role, you’ll help assess and govern IT and cybersecurity risks across third parties, supporting secure and resilient operations in a complex, international environment.

What You’ll Do

• Lead and coordinate meetings with stakeholders across different countries
• Assess third parties’ cybersecurity maturity
• Review evidence supporting third-party responses to control questionnaires
• Analyse data to assess risks, define audit scope and test controls
• Prepare reports and consolidate key risks and findings

Professional Experience & Technical Skills

• Proven experience in risk governance, IT controls and cybersecurity
• Knowledge of information security and cybersecurity risks
• Experience using data analysis to assess risks, scope audits and test controls
• Familiarity with ISO 27001, ISO 22301, ISO 9001 and relevant cybersecurity or governance frameworks
• Proactive, autonomous and analytical, with a client-focused and solutions-oriented approach
• English – B2 level or higher (mandatory)

Work Setup

The role is based in Madrid Río and follows a 50% hybrid work model. Availability for occasional international travel throughout the year is required.

Ready to grow your expertise in technology risk and cybersecurity? and join an international team supporting secure operations in the financial services sector!