Information Risk Lead — AI, GDPR & Cloud Governance

Nationale-Nederlanden; Madrid; Híbrido; EUR 55.000 - 85.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Top Employer Spain

Life insurance

Pension plan

Telework

Meal allowance

Wellness programme

EV charging parking

Descripción de la vacante

Nationale-Nederlanden Spain is seeking an experienced IT Risk and Information Security professional to join its Second Line of Defense. The role focuses on translating regulations into practical risk guidance across IT, cloud, data protection and emerging technologies, influencing major initiatives and senior management decisions.

You'll collaborate with technology, security and business teams in a hybrid work environment, benefiting from top‑employer recognition, strong learning support, and a

Formación

• Strong understanding of security frameworks and regulatory environments.
• 4+ years of experience in IT Risk, Information Security, IT Audit or similar areas.
• Ability to translate technical cybersecurity risks into clear, business‑focused guidance.
• English proficiency for collaboration in an international context.

Responsabilidades

• Shaping how IT security frameworks and standards (ISO 27001/27002, COBIT, ISF) are applied and challenged across the organisation.
• Translating regulations such as GDPR, DORA, EIOPA and the AI Act into practical, actionable guidance.
• Evaluating whether IT controls, processes and architectures effectively manage real risks.
• Interpreting insights from penetration tests, vulnerability scans and threat‑modelling.
• Providing independent risk input to major technology projects and change initiatives.
• Reviewing incidents, remediation plans and audit findings to strengthen resilience.
• Assessing vendor and third‑party risks together with asset owners.
• Acting as a trusted advisor for management and business teams on information‑risk topics.
• Supporting AI‑related initiatives from a risk and governance perspective.

Conocimientos

IT Risk

Information Security

IT Audit

Regulatory Knowledge

ISO 27001

GDPR

DORA

AI Governance

Stakeholder Management

English Proficiency

Herramientas

COBIT

Penetration Testing Tools

Vulnerability Scanning Tools

Descripción del empleo

Nationale-Nederlanden Spain is seeking an experienced IT Risk and Information Security professional to join its Second Line of Defense. The role focuses on translating regulations into practical risk guidance across IT, cloud, data protection and emerging technologies, influencing major initiatives and senior management decisions.

You'll collaborate with technology, security and business teams in a hybrid work environment, benefiting from top‑employer recognition, strong learning support, and a