Global ISO 27001 Risk & Compliance Lead

Cognizant; Madrid; On-site; EUR 65,000 - 90,000; Full time

Job summary

Cognizant is seeking a Business Information Risk Manager to advise on security governance and risk across client environments and corporate functions. You will lead risk assessments, coordinate ISO 27001 audits, and work with Legal, HR, Privacy, IT, and leadership to strengthen controls.

Ideal candidates have strong knowledge of ISO 27001, NIST or ISF, and can communicate complex concepts in English and Spanish. Some travel is expected.

Qualifications

• Experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC).
• Strong knowledge of ISO 27001 and risk assessment methodologies.
• Experience with ISO 27001, NIST or ISF frameworks and GDPR awareness.
• Excellent communication and stakeholder management in English and Spanish.

Responsibilities

• Manage information security and compliance risks across operations.
• Partner with stakeholders to understand critical security requirements.
• Lead risk assessments and control reviews for client accounts.
• Recommend mitigations and strengthen security controls.
• Support incident investigations and coordinate with teams.
• Conduct annual risk assessments and ongoing compliance activities.
• Coordinate ISO 27001 audits with auditors and stakeholders.
• Ensure alignment with ISO 27001, regulations, and standards.
• Collaborate with Legal, HR, Privacy, IT, and leadership.
• Evaluate compliance with security obligations and policies.

Skills

Information security

IT risk management

ISO 27001

GRC

stakeholder management

communication

security frameworks

bilingual English/Spanish

Job description

Cognizant is seeking a Business Information Risk Manager to advise on security governance and risk across client environments and corporate functions. You will lead risk assessments, coordinate ISO 27001 audits, and work with Legal, HR, Privacy, IT, and leadership to strengthen controls.

Ideal candidates have strong knowledge of ISO 27001, NIST or ISF, and can communicate complex concepts in English and Spanish. Some travel is expected.