ICT Risk Management Lead - Associate Director

Scope Se & Co. Kgaa; Madrid; On-site; EUR 80,000 - 95,000; Full time

Benefits offered by this job

Discretionary bonus

Comprehensive benefits package

Job summary

Scope Ratings is seeking an ICT Risk Manager to own the ICT risk management framework and coordinate risk assessment cycles, resilience testing and reporting. The role collaborates with business, technology and control functions to oversee policies, vendor risk, third-party risk and cyber threat intelligence.

You will design and run business continuity exercises, manage security testing programs, and produce executive summaries for the Resilience Committee and boards. English fluency is required.

Qualifications

• Experience drafting policies, methodologies and process documentation.
• Experience with ICT risk management, security tests, and resilience projects.
• Experience collaborating with business and technology functions on risk topics.
• Knowledge of ISO/IEC 27001, NIST CSF, and regulatory expectations.

Responsibilities

• Draft and maintain the ICT risk management framework and policies.
• Design processes for vendor assessment, findings and changes.
• Respond to client security questionnaires and disclosures.
• Identify opportunities to streamline processes and automate.
• Build relationships across business and control functions.
• Design and run ICT resilience exercises and scenarios.
• Run ICT security testing, including pen tests and scans.
• Maintain threat landscape and translate intel into risk changes.
• Consolidate audits, risk assessments and incidents into a single view.
• Write executive summaries for resilience and board briefings.

Skills

ICT risk management

Policy drafting

Risk assessments

Business continuity

Vendor risk

Incident response

Threat intelligence

Stakeholder mgmt

English fluency

Project management

Job description

Scope Ratings is seeking an ICT Risk Manager to own the ICT risk management framework and coordinate risk assessment cycles, resilience testing and reporting. The role collaborates with business, technology and control functions to oversee policies, vendor risk, third-party risk and cyber threat intelligence.

You will design and run business continuity exercises, manage security testing programs, and produce executive summaries for the Resilience Committee and boards. English fluency is required.