Global Third-Party Cyber & Tech Risk Auditor | Hybrid

HN Services España; Madrid; Hybrid; EUR 40,000 - 60,000; Full time

Benefits offered by this job

Hybrid work model (50% in Madrid)

Travel opportunities

Job summary

HN Services España is seeking a 3rd Party Cyber & Technology Risk Auditor to support an international project in the financial services sector. You will assess and govern IT and cybersecurity risks across third parties, helping to ensure secure and resilient operations in a complex, global environment.

Based in Madrid and adopting a 50% hybrid working model, you will lead stakeholder discussions across countries, review control evidence, test controls, and prepare reports highlighting key risks

Qualifications

• Proven experience in risk governance, IT controls and cybersecurity.
• Knowledge of information security and cybersecurity risks.
• Experience using data analysis to assess risks, scope audits and test controls.
• Familiarity with ISO 27001, ISO 22301, ISO 9001 and relevant cybersecurity or governance frameworks.
• Proactive, autonomous and analytical with a client-focused and solutions-oriented approach.
• English – B2 level or higher (mandatory).

Responsibilities

• Lead and coordinate meetings with stakeholders across different countries.
• Assess third parties’ cybersecurity maturity.
• Review evidence supporting third-party responses to control questionnaires.
• Analyse data to assess risks, define audit scope and test controls.
• Prepare reports and consolidate key risks and findings.

Skills

Risk governance

IT controls

Cybersecurity

Information security

Data analysis

ISO 27001 familiarity

English B2

Job description

HN Services España is seeking a 3rd Party Cyber & Technology Risk Auditor to support an international project in the financial services sector. You will assess and govern IT and cybersecurity risks across third parties, helping to ensure secure and resilient operations in a complex, global environment.

Based in Madrid and adopting a 50% hybrid working model, you will lead stakeholder discussions across countries, review control evidence, test controls, and prepare reports highlighting key risks