Cyber Security Incident Response Manager – Remote FinTech

Shine; Las Rozas de Madrid; Híbrido; EUR 90.000 - 120.000; Jornada completa

Descripción de la vacante

Shine Bank is seeking a Cyber Security Manager (Incident Response) to shape and operate our information security and digital operational resilience framework. Reporting directly to the CISO, you will own defensive security technology and incident-readiness capabilities.

You will work with IT, Risk, Internal Audit and Management to implement and mature our Cyber Defence capabilities, design playbooks, and ensure preparedness for regulatory standards.

Formación

• Hands-on security operations experience in regulated financial services or fintech.
• Experience building playbooks and running tabletop exercises.
• Strong knowledge of DORA, PCI-DSS, ISO 27001 and MITRE ATT&CK.
• Ability to translate threat intelligence into concrete controls.

Responsabilidades

• Design, write, and maintain incident response playbooks for major scenarios aligned with DORA ICT requirements.
• Ensure robust DDoS protection across internet-facing and payment-critical services with mitigation solutions.
• Plan tabletop exercises with technical, operational, and executive stakeholders and drive remediation.
• Manage security vendor/MSSP relationships and contribute to security roadmap and budget.
• Partner with the SOC Manager to ensure tooling supports detection/response (MITRE ATT&CK).
• Provide evidence and controls for PCI-DSS, DORA, and ACPR obligations.
• Report resilience metrics to security leadership; role located in Berlin or Madrid with two remote days per week.

Conocimientos

Incident response

Security ops

DDoS mitigation

Threat intel

Vendor management

English fluency

Herramientas

CrowdStrike

SentinelOne

Microsoft Defender

Cloudflare

Akamai

AWS Shield

Descripción del empleo

Shine Bank is seeking a Cyber Security Manager (Incident Response) to shape and operate our information security and digital operational resilience framework. Reporting directly to the CISO, you will own defensive security technology and incident-readiness capabilities.

You will work with IT, Risk, Internal Audit and Management to implement and mature our Cyber Defence capabilities, design playbooks, and ensure preparedness for regulatory standards.