IT Risk & Cyber Compliance Associate — Elevate Security

Getnet; Madrid; Presencial; EUR 60.000 - 85.000; Jornada completa

Descripción de la vacante

PagoNxt is seeking a Risk & Compliance Associate specialized in IT & Cyber Risk to identify, assess, and oversee technology risks across platforms, products and services. You will act as a second line of defense ensuring alignment with internal policies and regulatory requirements.

You will lead risk assessments (RCSA), monitor KRIs, support audits, and collaborate with stakeholders across subsidiaries to strengthen operational resilience and risk governance, including adherence to DORA.

Formación

• 5+ years of IT risk or technology risk management experience.
• Second line of defence experience in financial services.
• Bachelor’s degree in a related field is required.
• Knowledge of PSD2, payments ecosystem is a strong plus.

Responsabilidades

• Identify, assess and monitor IT and Cyber risks across platforms and digital products.
• Lead risk assessments (RCSA) and risk reporting activities.
• Support internal and external audits and regulatory interactions as needed.
• Define and monitor KRIs and assist in risk appetite discussions.
• Collaborate with stakeholders to ensure consistent risk management practices.

Conocimientos

IT Risk

Cyber Risk

Regulatory Compliance

Second Line of Defense

Risk Assessment

Cloud Risk

Operations Resilience

Third-Party Risk

Stakeholder Management

English Proficiency

Educación

Bachelor’s degree in Computer Engineering, Telecommunications, Mathematics, Physics, or related fields

Herramientas

ISO 27001

NIST

COBIT

Descripción del empleo

PagoNxt is seeking a Risk & Compliance Associate specialized in IT & Cyber Risk to identify, assess, and oversee technology risks across platforms, products and services. You will act as a second line of defense ensuring alignment with internal policies and regulatory requirements.

You will lead risk assessments (RCSA), monitor KRIs, support audits, and collaborate with stakeholders across subsidiaries to strengthen operational resilience and risk governance, including adherence to DORA.