IT & Cyber Risk Specialist — Controls & Oversight

Getnet; Boadilla del Monte; Presencial; EUR 65.000 - 90.000; Jornada completa

Descripción de la vacante

PagoNxt is seeking a Risk & Compliance Associate specializing in IT and Cyber Risk. You will identify, assess and oversee technology and cybersecurity risks across platforms, ensuring alignment with internal policies and regulatory requirements.

You will act as the second line of defense, challenging IT/Cyber controls and collaborating with stakeholders to strengthen risk management and resilience across subsidiaries.

Formación

• Bachelor’s degree in a relevant field is required.
• 5+ years in IT/Cyber risk or technology risk management.
• Experience in second line of defence and risk oversight.
• Knowledge of IT risk frameworks (ISO27001, NIST, COBIT) and regulatory needs.

Responsabilidades

• Identify, assess and monitor IT and Cyber risks across systems, platforms and products.
• Provide independent risk oversight and challenge over IT and Cyber risk.
• Contribute to IT & Cyber Risk Management Framework aligned with regulatory requirements (e.g. DORA).
• Define and monitor KRIs and support risk appetite frameworks.
• Assess risks related to cloud environments, infrastructure and architecture.
• Evaluate controls design and effectiveness to ensure proper risk mitigation.
• Support third-party / vendor risk management focused on IT, Cyber and resilience.
• Lead risk assessments (RCSA), control testing and risk reporting activities.
• Contribute to operational resilience initiatives and mapping of dependencies.

Conocimientos

IT Risk

Cyber Risk

Regulated Environments

Second Line of Defense

Stakeholder Management

Regulatory Awareness

English Proficiency

Educación

Bachelor’s in related field

Descripción del empleo

PagoNxt is seeking a Risk & Compliance Associate specializing in IT and Cyber Risk. You will identify, assess and oversee technology and cybersecurity risks across platforms, ensuring alignment with internal policies and regulatory requirements.

You will act as the second line of defense, challenging IT/Cyber controls and collaborating with stakeholders to strengthen risk management and resilience across subsidiaries.