IT RISK & GOVERNANCE ANALYST

Capitole; España; On-site; EUR 75,000 - 110,000; Full time

Benefits offered by this job

Private health insurance

Meal vouchers

Transport vouchers

Childcare vouchers

Wellhub subscription

Capitole Club discounts

Team buildings and events

Sports teams sponsorship

Tech communities participation

Job summary

Capitole is seeking an IT Risk & Governance Analyst with 8+ years of experience to support risk, information security and BCM on an international automotive/technology project.

You’ll implement Archer IRM across entities, assist ISO 27001 certification, and work with technical teams to translate governance needs into practical solutions. Strong English is required; Spanish a plus.

Qualifications

• 8+ years in IT risk, governance or related field.
• Experience with IT risk assessments, control evaluations and action plans.
• Hands-on BCM experience incl. BIA, continuity planning or DR.
• Familiarity with ISO 27001 and information security controls.
• Technical background and ability to work with technical teams.

Responsibilities

• Support IT Risk, Information Security and BCM processes and actions.
• Contribute to Archer IRM implementation across entities.
• Assist ISO 27001 certification activities and audit prep.
• Collaborate with Risk, IT Governance and Security stakeholders.
• Translate governance requirements into practical solutions with technical teams.
• Engage cross-functional teams on risk and governance initiatives.

Skills

IT Risk

Information Security

Business Continuity Management

Risk assessments

Stakeholder management

Tools

Archer IRM

Job description

Capitole is growing fast, and we want you to be part of the journey!

We’re looking for an IT RISK & GOVERNANCE ANALYST with 8+ years of experience to join our amazing team and work on an international project within the automotive and technology services sector.

• Support the development and implementation of IT Risk, Information Security and Business Continuity Management (BCM) processes, including risk assessments, control evaluations and action plans.


• Contribute to the functional implementation of Archer IRM across different entities, gathering requirements, designing processes and coordinating with business teams and the implementation provider.


• Support the ISO 27001 certification process, including risk analysis, audit preparation and presentation of the risk methodology to auditors.


• Work closely with technical teams to understand IT environments, identify risks and translate governance requirements into practical and workable solutions.


• Collaborate with Risk, IT Governance, Information Security and other stakeholders on cross-functional initiatives.


• At least 8 years of relevant experience in IT Risk, Governance, Business Continuity Management or a related field.


• Solid, hands-on experience in Business Continuity Management (BCM), including areas such as BIA, continuity planning or Disaster Recovery.


• Experience working with ISO 27001 and information security controls.


• A technical background and the ability to work directly with technical teams. A compliance-only background is not sufficient.


• Strong experience in at least one of the project's key domains, with working knowledge of the others and how they connect.


• Experience with Archer IRM or similar GRC/IRM tools is highly valued.


• C1-level English or higher, as English is the working language in this international environment.


• Strong communication skills for working with both technical and business stakeholders.

What we’re looking for in you:

• A proactive, collaborative and adaptable professional who is comfortable working across teams and in a changing environment.


• Someone who can work autonomously, get hands‑on with practical details and communicate clearly.


• Spanish language skills are a plus.

Why you'll love working with us

• Monthly feedback sessions with your team to keep learning and growing


• Private health insurance fully covered by Capitole


• Payflow benefits (meal, transport, childcare vouchers)


• Wellhub subscription


• Discounts with top brands through Capitole Club


• Team buildings every two months (our summer party and Christmas dinner are legendary!)


• Football, padel, and basketball teams sponsored by Capitole


• Tech communities where sharing knowledge is part of our DNA


• And above all… an AMAZING TEAM that you’ll love being a part of!

Want to learn more about us?

capitole-consulting.com

See what our teams are saying about us: Glassdoor Reviews

Ready to take the next step?

Send us your profile, we can’t wait to meet you!

The employee will adhere to information security policies:

• Will have access to confidential information related to Capitole and the project they are working on.


• Must comply with the security and internal policies of both the company and the client.


• Must sign an NDA (Non-Disclosure Agreement).