Senior Security Advisory & Compliance Consultant

Fortra; España; On-site; EUR 90,000 - 125,000; Full time

Job summary

Fortra in Spain seeks a Senior Security Services Consultant to serve as a trusted security advisor, helping customers identify and remediate risks, strengthen posture, and meet regulatory requirements.

You will assess environments, design compliant solutions, and guide remediation initiatives, translating complex security challenges into practical, sustainable actions. You will share expertise, mentor peers, and support ongoing security practices beyond initial engagements.

Qualifications

• Extensive experience in security risk assessments and remediation.
• Strong consulting and communication skills to translate security concepts for business and technical audiences.
• Experience with PCI DSS, SOX, HIPAA or similar frameworks.

Responsibilities

• Conduct IT and information security risk assessments and provide actionable remediation recommendations.
• Design and recommend security solutions aligned with regulatory requirements.
• Perform white-box penetration testing to identify vulnerabilities and propose remediation.
• Guide customers through security implementations and remediation initiatives.
• Mentor colleagues and educate customers on cybersecurity best practices.
• Travel to customer sites as required.

Skills

Security consulting

Risk assessments

Regulatory compliance

Communication skills

Security architecture

Project management

Spanish and English

Education

Security certifications (CRISC/CISA/CISM/CISSP)

Tools

IBM i

Penetration testing (white-box)

Job description

Fortra in Spain seeks a Senior Security Services Consultant to serve as a trusted security advisor, helping customers identify and remediate risks, strengthen posture, and meet regulatory requirements.

You will assess environments, design compliant solutions, and guide remediation initiatives, translating complex security challenges into practical, sustainable actions. You will share expertise, mentor peers, and support ongoing security practices beyond initial engagements.