Sr. Security Services Consultant

Fortra; España; On-site; EUR 90,000 - 125,000; Full time

Job summary

Fortra in Spain seeks a Senior Security Services Consultant to serve as a trusted security advisor, helping customers identify and remediate risks, strengthen posture, and meet regulatory requirements.

You will assess environments, design compliant solutions, and guide remediation initiatives, translating complex security challenges into practical, sustainable actions. You will share expertise, mentor peers, and support ongoing security practices beyond initial engagements.

Qualifications

• Extensive experience in security risk assessments and remediation.
• Strong consulting and communication skills to translate security concepts for business and technical audiences.
• Experience with PCI DSS, SOX, HIPAA or similar frameworks.

Responsibilities

• Conduct IT and information security risk assessments and provide actionable remediation recommendations.
• Design and recommend security solutions aligned with regulatory requirements.
• Perform white-box penetration testing to identify vulnerabilities and propose remediation.
• Guide customers through security implementations and remediation initiatives.
• Mentor colleagues and educate customers on cybersecurity best practices.
• Travel to customer sites as required.

Skills

Security consulting

Risk assessments

Regulatory compliance

Communication skills

Security architecture

Project management

Spanish and English

Education

Security certifications (CRISC/CISA/CISM/CISSP)

Tools

IBM i

Penetration testing (white-box)

Job description

Whether you’re an experienced professional or just getting started, your contributions matter at Fortra. If you’re passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more!

Job Description Summary

We are seeking an experienced, client-focused Senior Security Services Consultant to join our team. In this role, you will serve as a trusted security advisor to customers, helping them identify and address security risks, strengthen their security posture, and meet evolving compliance requirements.

You will assess customer environments, design security solutions aligned with business and regulatory requirements, and guide customers through remediation and implementation initiatives. Combining deep technical expertise with strong consulting and communication skills, you will translate complex security challenges into practical, sustainable solutions.

As a senior member of the team, you will also share expertise, mentor others, and help customers adopt security practices and processes that enable them to manage their environments effectively beyond the initial engagement.

What You’ll Do

• Conduct IT and information security risk assessments, identify security gaps, and provide clear, actionable recommendations for remediation.
• Design and recommend security solutions that align with customer requirements, internal security policies, and applicable regulatory or compliance obligations.
• Perform white-box penetration testing to identify vulnerabilities and security weaknesses and recommend appropriate remediation.
• Guide customers through security implementations and remediation initiatives related to requirements and frameworks such as PCI DSS, SOX, and HIPAA, as applicable.
• Assist customers in addressing findings from security assessments and audits and implementing new security technologies and controls.
• Advise customers on security architecture, operating system capabilities, configuration, and security best practices.
• Develop and implement sustainable processes and controls that help customers maintain appropriate security practices following project completion.
• Help customers implement and monitor compliance requirements, including applicable security and compliance solutions and supporting documentation.
• Communicate technical findings, risks, and recommendations effectively to both technical and business stakeholders.
• Build trusted, long-term customer relationships by providing practical guidance tailored to each customer’s environment and business needs.
• Manage multiple customer engagements and projects while maintaining clear communication regarding priorities, progress, risks, and outcomes.
• Mentor colleagues and educate customers and internal stakeholders on cybersecurity practices and emerging security considerations.
• Identify opportunities to improve consulting methodologies, assessment practices, documentation, and service delivery.
• Perform additional duties and contribute to security initiatives and projects as needed.

Qualifications

• 10+ years of professional experience working with the IBM i operating system.
• 10+ years of experience in information security, cybersecurity, enterprise risk, compliance, or a related discipline.
• Significant experience identifying and remediating security concerns discovered through formal risk assessments.
• Demonstrated experience with IT and information security risk frameworks, enterprise risk methodologies, and security risk assessment practices.
• Strong knowledge of regulatory, privacy, and security compliance requirements and their application within customer environments.
• Experience designing or assessing security architecture, infrastructure, systems, and applications.
• Hands-on experience conducting security assessments and testing, including white-box penetration testing.
• Experience supporting security or compliance initiatives involving standards and requirements such as PCI DSS, SOX, HIPAA, or similar frameworks and regulations.
• At least one relevant security, risk, audit, or governance certification, such as CRISC, CISA, CISM, CISSP, or equivalent.
• Strong consulting and communication skills, with the ability to translate complex technical and security concepts for business and technical audiences.
• Demonstrated ability to work independently, take ownership of customer engagements, and keep appropriate stakeholders informed.
• Strong project and time-management skills, including the ability to lead and coordinate multiple concurrent customer engagements.
• Proven ability to develop trusted, long-term customer relationships.
• Experience mentoring others and sharing cybersecurity knowledge and best practices.
• Ability and willingness to travel to customer sites as required
• Strong problem-solving and analytical skills, with a keen attention to detail.
• Proficiency in Spanish and English are required

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.