Senior Cyber GRC Specialist - SCFGS

Banco Santander SA; Irún; On-site; EUR 70,000 - 100,000; Full time

Job summary

Santander Consumer Finance Global Services is seeking a Senior Cyber GRC Specialist based in Spain to drive governance, risk and compliance activities aligned with corporate cybersecurity policies and local/regional requirements.

You will report on GRC status to Corporate Security Functions, oversee risk lifecycle, and coordinate Cyber Director Plans across entities while promoting best practices and continuous improvement in a multinational, technology-driven environment.

Qualifications

• Minimum 4 years of experience in Cybersecurity GRC, IT risk management or related fields.
• Experience in regulated environments is required.
• Experience coordinating governance activities across multiple stakeholders, business units or geographies is required.
• Advanced or higher English proficiency (minimum B2; C1 preferred) is required.
• Spanish working proficiency is preferred.

Responsibilities

• Report cybersecurity governance, risk and compliance status to Corporate Security Functions and Second Line of Defense stakeholders.
• Oversee cyber risk lifecycle, including risk identification, assessment, mitigation and reporting.
• Coordinate local Cybersecurity Director Plans aligned with global strategies.
• Promote standardized and optimized cybersecurity services, processes and controls across countries.
• Identify best practices and lessons learned to improve security posture and operations.

Skills

Cybersecurity GRC

IT risk management

Regulatory compliance

Stakeholder management

Risk metrics

Job description

Senior Cyber GRC Specialist - SCFGS Country: Spain

Santander Consumer Finance Global Services is looking for a Senior Cyber GRC Specialist based out of Madrid. As a Senior Cyber GRC Specialist, you will support the implementation and oversight of the Cyber Transformation Plan, ensuring alignment with corporate cybersecurity policies, regulatory requirements, and risk management frameworks across the organization. You will act as a key partner to local and global stakeholders, driving governance, risk, compliance, and cybersecurity oversight activities while promoting best practices and continuous improvement. We’re shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas.

• Reporting cybersecurity governance, risk and compliance status to Corporate Security Functions and Second Line of Defense stakeholders.
• Supervising cybersecurity plans and supporting the definition, monitoring and optimization of cybersecurity budgets across entities.
• Monitoring compliance with cybersecurity policies, standards, regulatory requirements and internal controls.
• Defining, maintaining and tracking Key Risk Indicators (KRIs), Technology Health (ToH) maps and cybersecurity performance metrics.
• Managing and overseeing the Cyber Risk Lifecycle, including risk identification, assessment, mitigation and reporting activities.
• Coordinating the definition and execution of local Cybersecurity Director Plans, ensuring alignment with global cybersecurity strategies and corporate objectives.
• Assessing existing cybersecurity governance practices and proposing improvements to strengthen security posture and operational effectiveness.
• Promoting standardization, harmonization and optimization of cybersecurity services, processes and controls across countries.
• Identifying, sharing and implementing best practices, lessons learned and synergies among local and global teams.
• Ensuring the effective implementation of cybersecurity regulations, procedures and standards while maintaining strong collaboration with internal and external stakeholders.

WHAT YOU’LL BRING

Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organization. We’re enabling teams to go beyond by valuing who they are and empowering what they bring.

Professional Experience

• Minimum 4 years of experience in Cybersecurity Governance, Risk & Compliance (GRC), IT Risk Management, Information Security, Audit or related disciplines (Required).
• Experience working within regulated environments (Required).
• Experience coordinating cybersecurity governance activities across multiple stakeholders, business units or geographies (Required).
• Language English – Advanced level (minimum B2; C1 preferred) (Required).
• Spanish – Professional working proficiency (Preferred).

Hard Skills

• Strong understanding of cybersecurity threats, vulnerabilities, attack vectors and security control deficiencies (Required).
• Cybersecurity Governance, Risk and Compliance frameworks, including risk assessments, KRIs, RCSA and cyber metrics (Required).
• Knowledge of cybersecurity regulations, policies, standards and control environments applicable to financial institutions (Preferred).
• Experience monitoring and managing cybersecurity audits, findings, remediation plans and recommendations (Preferred).
• Understanding of cybersecurity budgeting and financial management concepts, including CAPEX and OPEX (Preferred).
• Experience managing and overseeing cybersecurity vendors, contracts and third-party services (Preferred).
• Knowledge of Business Continuity, Information Security Office governance and resilience frameworks (Preferred).
• Professional certifications such as CISSP, CISM, CISA, CEH, CSX or equivalent (Preferred).
• Experience collaborating with local Information Protection teams and global cybersecurity functions in international organizations (Preferred).

Soft Skills

• Strong analytical and risk-based thinking.
• Excellent stakeholder management and communication skills.
• Governance and compliance-oriented mindset.
• Ability to influence and drive alignment across multiple teams and geographies.
• Continuous improvement and problem-solving mindset.
• Strong organizational skills and attention to detail.
• Proactive approach to risk identification and remediation.
• Collaboration and teamwork in complex, matrixed environments.

If you want to know more about us, follow us on https://es.linkedin.com/company/banco-santander

The Santander Way

Santander is evolving from a global, high-impact brand into a technology-driven organization, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible. This is more than a strategic shift. It’s a chance for driven professionals to grow, learn, and make a real difference. Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management.

Ready to make it happen? It starts with you. It starts here.