Senior Cyber GRC Lead - Global Risk & Compliance

Santander Consumer Finance Global Services; Boadilla del Monte; On-site; EUR 90,000 - 120,000; Full time

Job summary

Santander Consumer Finance Global Services in Madrid seeks a Senior Cyber GRC Specialist to support the Cyber Transformation Plan, ensuring alignment with cybersecurity policies, regulatory requirements and risk management frameworks. You will partner with local and global teams to drive governance, risk, and compliance oversight.

You will report on GRC status, oversee budgets, monitor policy compliance, track KRIs and manage the Cyber Risk Lifecycle, while promoting best practices across

Qualifications

• Minimum 4 years of experience in Cybersecurity GRC, IT risk, information security, audit or related disciplines.
• Experience in regulated environments is required.
• Experience coordinating governance activities across multiple stakeholders, units or geographies.

Responsibilities

• Report cybersecurity GRC status to Corporate Security Functions and second line of defense.
• Supervise cybersecurity plans and monitor budgets across entities.
• Monitor compliance with cybersecurity policies, standards and regulatory requirements.
• Define and track KRIs, ToH maps and cybersecurity performance metrics.
• Manage Cyber Risk Lifecycle including risk identification, assessment and remediation.
• Coordinate local Cybersecurity Director Plans with global strategy.
• Assess existing governance practices and propose improvements.
• Promote standardization and optimization of cybersecurity services across countries.
• Identify and share best practices across local and global teams.
• Ensure implementation of cybersecurity regulations and collaborate with stakeholders.

Skills

Soft skills: analytical thinking

Stakeholder management

Governance & compliance

Communication

Problem solving

Collaboration

Attention to detail

Job description

Santander Consumer Finance Global Services in Madrid seeks a Senior Cyber GRC Specialist to support the Cyber Transformation Plan, ensuring alignment with cybersecurity policies, regulatory requirements and risk management frameworks. You will partner with local and global teams to drive governance, risk, and compliance oversight.

You will report on GRC status, oversee budgets, monitor policy compliance, track KRIs and manage the Cyber Risk Lifecycle, while promoting best practices across