Cyber Incident Response Lead – Remote/Hybrid

Hub; Madrid; Híbrido; EUR 110.000 - 140.000; Jornada completa

Descripción de la vacante

Shine Bank is seeking a Cyber Security Manager (Incident Response) to shape and operate our information security and digital operational resilience framework. Reporting to the CISO, you will own our defensive security tech stack and incident-readiness across IT, Risk and Audit.

Based in Madrid or Berlin with two remote days per week, you will design playbooks, coordinate tabletop exercises, and ensure compliance with DORA, PCI-DSS and ISO 27001 while aligning with MITRE ATT&CK.

Formación

• Hands-on security operations background in regulated fintech.
• Experience deploying and operating EDR/XDR platforms.
• Experience with DDoS mitigation and edge security.
• Knowledge of DORA, PCI-DSS, ISO27001 and MITRE ATT&CK.
• Fluent English; German is a plus.
• Strong stakeholder and vendor management.

Responsabilidades

• Design and maintain incident response playbooks aligned with DORA expectations.
• Ensure robust DDoS protection across internet-facing services using mitigation solutions.
• Plan tabletop exercises and drive remediation to closure.
• Manage security vendor and MSSP relationships, roadmap and budget.
• Collaborate with SOC to map tooling to MITRE ATT&CK.
• Provide evidence for PCI-DSS, DORA, ACPR obligations.
• Report resilience metrics to security leadership; role based in Madrid or Berlin with two remote days weekly.

Conocimientos

Incident response

EDR/XDR

DDoS mitigation

Cloud/CDN security

MITRE ATT&CK

ISO27001

Vendor management

Stakeholder mgmt

English fluency

German advantage

Herramientas

CrowdStrike

SentinelOne

Microsoft Defender

Cloudflare

Akamai

AWS Shield

Descripción del empleo

Shine Bank is seeking a Cyber Security Manager (Incident Response) to shape and operate our information security and digital operational resilience framework. Reporting to the CISO, you will own our defensive security tech stack and incident-readiness across IT, Risk and Audit.

Based in Madrid or Berlin with two remote days per week, you will design playbooks, coordinate tabletop exercises, and ensure compliance with DORA, PCI-DSS and ISO 27001 while aligning with MITRE ATT&CK.