It & Cyber Risk Associate

Get Net Company; Madrid; Presencial; EUR 52.000 - 68.000; Jornada completa

Descripción de la vacante

Get Net Company in Madrid is seeking an IT & Cyber Risk associate to oversee and support the 1LoD in identifying, assessing, and monitoring technology and cybersecurity risks across the Global card payment platform.

You will collaborate with stakeholders to ensure controls operate effectively, support incident analysis, and contribute to third-party risk assessments in line with PCI-DSS, ISO 27001, and PSD2, with fluency in English and Spanish.

Formación

• Understanding IT and cybersecurity risk concepts (e.g., access management, network security, data protection).
• Familiarity with ISO 27001, NIST and similar frameworks.
• Analytical skills with ability to work with data.
• Understanding of core payment systems and technology environments.
• Strong documentation skills and attention to risk reporting and tracking.

Responsabilidades

• Oversee and support 1LoD in IT & cyber risk identification, assessment and monitoring for the Global card payment platform.
• Assist in IT and cyber risk assessments including involvement in RCSAs and control reviews.
• Monitor KRIs related to cybersecurity and technology risks.

Conocimientos

IT risk concepts understanding

Frameworks & standards familiarity

Analytical data skills

Knowledge of payment systems

Documentation & reporting

Educación

Bachelor's degree

Descripción del empleo

KEY RESPONSIBILITIES

The IT & Cyber Risk associate will oversee and support the 1LoD in the identification, assessment, and monitoring of technology and cybersecurity risks across the Global card payment platform, helping to ensure the protection of systems, data, and services.

• 1. Support the execution of IT and cyber risk assessments, including participation in RCSAs and control reviews.
• 2. Assist in the identification and monitoring of Key Risk Indicators (KRIs) related to cybersecurity and technology risks.
• 3. Contribute to the monitoring and follow-up of security incidents, including documentation and root cause analysis.
• 4. Collaborate with key stakeholders to ensure controls are properly designed and operating effectively.
• 5. Support third-party risk assessments, particularly for technology providers and outsourced services.
• 6. Help ensure alignment with relevant regulations and standards (e.g., PCI-DSS, ISO 27001, PSD2).

KEY REQUIREMENTS

• > 5 years in similar role
• Superior graduation
• 1. Understanding of IT and cybersecurity risk concepts (e.g., access management, network security, data protection).
• 2. Familiarity with common frameworks and standards (e.g., ISO 27001, NIST).
• 3. Analytical skills with ability to work with data.
• 4. Understanding of core payment systems and technology environments.
• 5. Strong documentation skills and attention to detail in risk reporting and tracking.

Other relevan information

Fluent in both English and Spanish is a must for this position due to interactions with key stakeholders.