Information Risk Specialist — AI & GDPR Governance (Hybrid)

NN; Madrid; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Nationale-Nederlanden Spain is seeking an Information Risk Specialist (2nd Line of Defense) in Madrid. The role focuses on strengthening digital resilience across IT security, risk and governance, with exposure to cloud, AI governance and regulatory frameworks.

The position offers a hybrid work model, collaboration with senior management, and opportunities to contribute to strategic risk initiatives. The candidate will translate regulations into actionable guidance, assess vendor risks, and

Qualifications

• 4+ years of experience in IT Risk, Information Security or IT Audit.
• Strong understanding of security frameworks and regulatory environments.
• Ability to translate cybersecurity risks into clear business guidance.
• English proficiency for collaboration in an international context.

Responsibilities

• Shaping IT security frameworks and standards across the organisation.
• Translating GDPR, DORA, EIOPA and AI Act into practical guidance.
• Evaluating IT controls, processes and architectures to manage real risks.
• Interpreting findings from penetration tests, scans and threat modelling.
• Providing independent risk input to technology projects and change initiatives.

Skills

IT Risk

Information Security

IT Audit

Tools

ISO 27001/27002

COBIT

ISF

Job description

Nationale-Nederlanden Spain is seeking an Information Risk Specialist (2nd Line of Defense) in Madrid. The role focuses on strengthening digital resilience across IT security, risk and governance, with exposure to cloud, AI governance and regulatory frameworks.

The position offers a hybrid work model, collaboration with senior management, and opportunities to contribute to strategic risk initiatives. The candidate will translate regulations into actionable guidance, assess vendor risks, and