Cyber Risk Manager (f/m/d)

Axpo Group; Madrid; Híbrido; EUR 52.000 - 82.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Meal allowances

Internet compensation

Gym coverage

Health insurance

Flexible working hours

Training courses

Descripción de la vacante

Axpo Group is seeking a cybersecurity risk management professional to help shape and advance risk practices across its international energy business. You will collaborate with IT, security, and business teams to strengthen risk-informed decision-making.

The role focuses on coordinating risk assessments, maintaining risk registers, and delivering dashboards and updates on cyber risk posture. We value curiosity, collaboration, and diverse perspectives.

Formación

• Experience in cybersecurity, cyber risk management, governance, compliance, or related field.
• Good understanding of cybersecurity risk concepts and assessment methodologies.
• Exposure to ISO/IEC 27001, NIST, NIS2 or similar frameworks.
• Experience with structured documentation, reporting, and risk workflows.

Responsabilidades

• Coordinate cyber risk assessments across Group entities, services, and business areas.
• Maintain the Group-wide cybersecurity risk register and governance workflows.
• Support third-party cyber risk management within the TPRM framework.
• Track remediation actions, risk treatment plans, and overdue items with stakeholders.
• Prepare dashboards, reports, and updates on cyber risk posture and themes.
• Collaborate with IT, procurement, legal, audit, and business teams for risk-informed decisions.

Conocimientos

Cyber risk management

Governance & compliance

Audit & reporting

Analytical communication

Vendor risk management

Herramientas

GRC platforms

Descripción del empleo

Join us in strengthening cyber resilience across Axpo’s international energy business. In this role, you will help shape and further develop cyber risk management practices while collaborating with diverse teams across IT, security, and business functions.

What you will do:

• Coordinate and perform cyber risk assessments across Group entities, services, and business areas
• Maintain and further develop the Group-wide cybersecurity risk register and related governance workflows
• Support and enhance third-party cyber risk management activities within the Group’s TPRM framework
• Track remediation actions, risk treatment plans, and overdue items together with stakeholders
• Prepare dashboards, reports, and management updates on cyber risk posture and key risk themes
• Collaborate with IT, procurement, legal, audit, and business teams to strengthen risk-informed decision-making

What you bring & who you are:

• Experience in cybersecurity, cyber risk management, governance, compliance, audit, or a related field
• Good understanding of cybersecurity risk concepts, governance processes, and risk assessment methodologies
• Exposure to frameworks and standards such as ISO/IEC 27001, NIST, NIS2, or similar
• Experience working with structured documentation, reporting, and ideally GRC platforms or workflow tools
• Strong analytical and communication skills with a pragmatic and solution-oriented mindset
• Ideally, experience with third-party risk management, vendor assessments, or remediation tracking

Even if you do not meet every requirement, we encourage you to apply. We value curiosity, collaboration, and different perspectives that help us continuously improve.

About the team:

Our international Information Security and Group IT teams work together to create secure, resilient, and practical solutions for the evolving energy sector. We value teamwork, ownership, and continuous learning across diverse backgrounds and experiences.

Benefits:

At our company, we strive to create a culture of continuous learning, personal growth, and inter- national community involvement. We're passionate about providing our employees with the tools and resources they need to succeed, and we're confident that you'll love being part of our team!

• Working Hours: We offer flexible working hours to accommodate your work schedule. We can work part of our time remotely and the rest at our offices in Madrid, Torre Europa.
• Meal allowances: You can enjoy delicious meals on us, no matter if you are working remotely or on-site.
• Option to use it for public transportation or childcare instead.
• Internet Compensation: We cover the cost of your home internet connection, as we understand how essential connectivity is in the modern workplace.
• Training courses: Our company is committed to helping our employees grow and develop their skills, which is why we offer a variety of industry- specific training courses and a learning channel.
• Gym Coverage: Stay active and healthy with our 90% coverage benefit, which provides access to the nearby gym: Forus Selection to keep you energized throughout the day
• Health Insurance: We take the health and well-being of our employees seriously, which is why we offer a comprehensive health insurance plan and the option to extend it to your spouse and children.

At Axpo Group, we are dedicated to fostering a culture of non-discrimination, tolerance, and inclusion. As an equal opportunity employer, we welcome applications regardless of race and ethnicity, gender identity and expression, sexual orientation, age, disability, as well as socioeconomic, cultural, and religious background. We are committed to ensuring a respectful and inclusive recruiting process and workplace for everyone.