Senior Cyber Risk & Tech Risk Specialist (2LoD)

Santander Corporate & Investment Banking; Boadilla del Monte; Híbrido; EUR 90.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Training & certifications

Competitive rewards

Descripción de la vacante

Santander Corporate & Investment Banking seeks a Senior Analyst to lead 2LoD cybersecurity risk oversight for complex risk domains in a global banking environment. Based in Madrid, you’ll collaborate with teams across technology and risk to ensure effective controls and risk reporting.

You will drive assessments, challenge risk scores, and support risk-based decisions while aligning with industry standards. A strong security background and professional certifications are required.

Formación

• ~5–8 years in cybersecurity risk, technology risk, cyber audit or 2LoD/3LoD roles in financial services or other highly regulated environments.
• Bachelor’s in Computer Science, Engineering or related (Required). Master’s a plus.
• Professional certifications strongly valued: CISA, CISM, CRISC, CISSP; cloud security knowledge (AWS/Azure/GCP).

Responsabilidades

• Lead 2LoD review & challenge of cybersecurity risk assessments, control evaluations, risk metrics, mitigation plans and risk acceptances.
• Run targeted risk reviews of priority domains (IAM, network/firewall, vulnerability & patch management, cloud security, AppSec/containers, encryption/tokenization, DLP, logging/monitoring, incident response/SOC).
• Provide independent oversight on digital transformation and business change, assessing cyber risk impacts and required controls from design to go-live.
• Strengthen third-party/critical services risk management: certify services/vendors, challenge inherent risk scoring, assign residual risk ratings, and monitor remediation.
• Analyze cyber risk data (incidents, KRIs, control gaps, risk register) to identify patterns and hotspots.
• Evolve and transpose policies/frameworks to steer safe technology adoption; align to industry standards.
• Prepare governance reporting for committees and working groups with urgency and evidence.

Conocimientos

IAM

Network security

Firewall management

Vulnerability management

Cloud security

Secure SDLC

Containerization

Encryption/tokenization

DLP

Logging & monitoring

Incident detection & response

Offensive security

Educación

Bachelor’s in Computer Science/Engineering

Master’s degree preferred

Certifications: CISA, CISM, CRISC, CISSP; cloud security (AWS/Azure/GCP)

Descripción del empleo

Santander Corporate & Investment Banking seeks a Senior Analyst to lead 2LoD cybersecurity risk oversight for complex risk domains in a global banking environment. Based in Madrid, you’ll collaborate with teams across technology and risk to ensure effective controls and risk reporting.

You will drive assessments, challenge risk scores, and support risk-based decisions while aligning with industry standards. A strong security background and professional certifications are required.