IT Risk Compliance Analyst

Talan; Málaga; Híbrido; EUR 30.000 - 50.000; Jornada completa

Descripción de la vacante

A cybersecurity consultancy in Málaga is seeking an IT Risk & Compliance Analyst to ensure the security and compliance of applications. The role includes managing vulnerabilities, conducting risk assessments, and advising development teams on secure coding practices. We're looking for candidates with 1-3 years of relevant experience, including familiarity with Docker and Kubernetes. The position offers a hybrid work model with ongoing training and comprehensive benefits.

Servicios

Continuous training and professional development

Comprehensive benefits including private medical and life insurance

Smart Office Pack for flexible remote work

Opportunities for growth in a multicultural environment

Formación

• 1–3 years of experience in software development, IT security, or risk management.
• Hands-on experience with Docker and Kubernetes.
• Experience with security analysis tools for code and container scanning.

Responsabilidades

• Manage vulnerabilities across applications and containerized environments.
• Conduct risk assessments for new applications.
• Advise development teams on secure software practices.
• Integrate and manage security tools for scanning.
• Track and support remediation of identified vulnerabilities.
• Participate in architecture reviews.
• Contribute to the organization's security improvements.

Conocimientos

Docker

Kubernetes

Risk management

Application security principles

Secure coding

Vulnerability management

AWS

Azure

GCP

Educación

Bachelor’s Degree in Computer Science

Herramientas

Security analysis tools

Descripción del empleo

Job Description

We are looking for an IT Risk & Compliance Analyst to join our cybersecurity and governance team in Málaga.

In this role, you will be responsible for ensuring the security and compliance of applications and containerized environments, advising development teams on secure coding practices, and driving continuous improvement in risk management processes.

This position involves close collaboration with software engineers, architects, and security specialists across international teams.

Responsibilities

• Govern and manage vulnerabilities across applications and containerized environments (Docker, Kubernetes).
• Conduct risk assessments for new applications from the design phase, including threat modeling.
• Advise and guide development teams in the adoption of secure software practices.
• Integrate and manage security tools such as SCA, SAST, DAST, CSPM, and Container Security solutions.
• Track, prioritize, and support the remediation of identified vulnerabilities, validating false positives where applicable.
• Participate in architecture reviews and define security requirements for new or evolving systems.
• Contribute to continuous improvement initiatives in the organization’s security posture and development lifecycle.

Qualifications

Experience :

• 1–3 years of professional experience in software development, IT security, or risk management.
• Hands‑on experience with Docker, Kubernetes, and container ecosystems.
• Experience with security analysis tools for code and container scanning.

Education :

Bachelor’s Degree in Computer Science, Engineering, or a related technical discipline.

Skills & Knowledge

Technical :

• Understanding of application security principles, secure coding, and vulnerability management.
• Familiarity with DevSecOps practices and CI / CD security integration.
• Knowledge of SDLC processes and risk assessment methodologies.
• Exposure to cloud environments (AWS, Azure, GCP) is highly desirable.

Soft Skills :

• Strong communication and teamwork abilities.
• Analytical mindset and attention to detail.
• Proactive approach to learning and adapting to emerging threats.

Nice to Have

• Security certifications such as OSCP, CKA, CKS, CISSP, or equivalent.
• Previous experience in regulated sectors such as fintech or financial services.
• Technical curiosity, problem‑solving attitude, and a passion for cybersecurity.

What We Offer

• Full‑time, permanent position.
• Hybrid work model (Málaga‑based).
• Opportunity to grow in a multicultural, international environment.
• Smart Office Pack for flexible remote work.
• Continuous training and professional development.
• Comprehensive benefits including private medical and life insurance.
• Exposure to global cybersecurity and risk management projects.

If you have read this far and you are looking forward to joining this challenge, do not hesitate to apply... we would be delighted to meet you!