Cyber Security Risk & Audit Lead

F. Hoffmann-La Roche AG; Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Roche is seeking an IT Security Risk & Audit Specialist to oversee end-to-end security risk lifecycle, bridging engineering and executive risk posture to protect global systems and vendors.

The role covers risk assessments, third‑party evaluations, audit support, and continuous monitoring, with emphasis on OT/IoT security and regulatory alignment. A dynamic, global enterprise environment offers exposure to hybrid-cloud and healthcare industry standards.

Formación

• Bachelor’s degree in Cybersecurity, Computer Science, or related field; Master’s preferred.
• 3+ years in security risk, audit or compliance in a global enterprise.
• Experience with hybrid-cloud and OT/IoT environments is required or preferred.

Responsabilidades

• Support security risk assessments and audits using NIST CSF and ISO 27001.
• Evaluate third‑party cyber risk with focus on supply‑chain integrity and breach readiness.
• Assist internal/external audits and remediation guidance.
• Design automated monitoring to measure control effectiveness in real time.
• Assess security posture of OT/manufacturing environments for availability and protection.

Conocimientos

Security risk management

Audit & compliance

ISO 27001

NIST CSF

GDPR/HIPAA privacy

OT/IoT security

Cloud security (hybrid)

Educación

Bachelor’s degree in Cybersecurity/CS

Master’s degree preferred

Herramientas

ITIL

Descripción del empleo

Roche is seeking an IT Security Risk & Audit Specialist to oversee end-to-end security risk lifecycle, bridging engineering and executive risk posture to protect global systems and vendors.

The role covers risk assessments, third‑party evaluations, audit support, and continuous monitoring, with emphasis on OT/IoT security and regulatory alignment. A dynamic, global enterprise environment offers exposure to hybrid-cloud and healthcare industry standards.