Senior It Risk Officer - Barcelona

Eurofins; Barcelona; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

Eurofins is seeking an IT and cybersecurity risk specialist to identify, assess and mitigate risks across its European operations. You will conduct risk assessments for laboratories, regional infrastructure, and central IT, collaborating with IT, security and business teams to shape risk-based improvements.

Frequent travel across Europe is required as you translate complex technical findings into pragmatic business risk, produce reports for leadership, and support remediation actions with strong

Formación

• 3-7 years of relevant experience in cybersecurity, information security, IT risk, IT audit or related field
• Experience performing IT risk assessments, security assessments or IT audits
• Strong understanding of risk management and cybersecurity principles
• Broad technical understanding of networking, AD/Entra ID, IAM/MFA, endpoint security, vulnerability management, Windows/Linux, cloud security, SIEM, backup and disaster recovery
• Ability to understand technical architectures and discuss risks credibly with engineers
• Strong analytical skills to distinguish significant risks
• Excellent written and verbal English communication for technical and non-technical audiences
• Strong stakeholder management and negotiation skills
• Willingness to travel frequently across Europe
• Knowledge of NIS2, EU data protection and common cybersecurity frameworks is a plus
• technically curious
• pragmatic
• networking
• firewalls
• Active Directory / Entra ID

Responsabilidades

• Plan and perform IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT services
• Evaluate technical and organizational controls in areas such as network security, IAM, endpoint security, vulnerability management, cloud, logging/monitoring, backup and IT resilience
• Identify weaknesses and assess potential business impact
• Challenge existing security implementations when needed
• Translate technical findings into clear business risks and pragmatic recommendations
• Produce high-quality reports and present results to technical and non-technical stakeholders
• Follow up on remediation actions and verify risk reduction
• Maintain strong relationships with IT, security and business stakeholders
• 3-7 years of relevant experience in cybersecurity, information security, IT risk, IT audit or related field
• Experience performing IT risk assessments, security assessments or IT audits
• Strong understanding of risk management and cybersecurity principles
• Broad technical understanding of networking, AD/Entra ID, IAM/MFA, endpoint security, vulnerability management, Windows/Linux, cloud security, SIEM, backup and disaster recovery
• Ability to understand technical architectures and discuss risks credibly with engineers
• Strong analytical skills to distinguish significant risks
• Excellent written and verbal English communication for technical and non-technical audiences
• Strong stakeholder management and negotiation skills
• Willingness to travel frequently across Europe
• Knowledge of NIS2, EU data protection and common cybersecurity frameworks is a plus
• technically curious
• pragmatic
• networking
• firewalls
• Active Directory / Entra ID

Conocimientos

Cybersecurity

IT risk

IT audit

Stakeholder management

English communication

Travel willingness

Pragmatic

Networking

Educación

Bachelor's degree in Computer Science / Cybersecurity / Information Systems / Engineering or equivalent

Certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 advantageous

Herramientas

Active Directory / Entra ID

SIEM

Windows

Linux

Cloud security

Networking

Firewalls

Descripción del empleo

In this role you identify, assess and mitigate IT and cybersecurity risks across Eurofins' European operations. You will conduct risk assessments for laboratories, regional infrastructure, and central IT, collaborating with IT, security and business teams. You'll contribute to security and resilience initiatives, including phishing simulations and resilience exercises. Frequent travel across Europe is required as you shape risk-based improvements and report findings to leadership.

• Plan and perform IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT services
• Evaluate technical and organizational controls in areas such as network security, IAM, endpoint security, vulnerability management, cloud, logging/monitoring, backup and IT resilience
• Identify weaknesses and assess potential business impact
• Challenge existing security implementations when needed
• Translate technical findings into clear business risks and pragmatic recommendations
• Produce high-quality reports and present results to technical and non-technical stakeholders
• Follow up on remediation actions and verify risk reduction
• Maintain strong relationships with IT, security and business stakeholders
• 3-7 years of relevant experience in cybersecurity, information security, IT risk, IT audit or related field
• Experience performing IT risk assessments, security assessments or IT audits
• Strong understanding of risk management and cybersecurity principles
• Broad technical understanding of networking, AD/Entra ID, IAM/MFA, endpoint security, vulnerability management, Windows/Linux, cloud security, SIEM, backup and disaster recovery
• Ability to understand technical architectures and discuss risks credibly with engineers
• Strong analytical skills to distinguish significant risks
• Excellent written and verbal English communication for technical and non-technical audiences
• Strong stakeholder management and negotiation skills
• Willingness to travel frequently across Europe
• Knowledge of NIS2, EU data protection and common cybersecurity frameworks is a plus
• Education: university degree in Computer Science, Cybersecurity, Information Systems, Engineering or equivalent; certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 are advantageous
• technically curious
• pragmatic
• networking
• firewalls
• Active Directory / Entra ID