Strategic Information Risk & Compliance Leader

Cognizant; Comunidad de Madrid; On-site; EUR 70,000 - 110,000; Full time

Job summary

Cognizant is seeking a Business Information Risk Manager to guide security governance and risk management across client environments and corporate functions.

You will partner with stakeholders to understand critical security requirements, lead risk assessments, and coordinate ISO 27001 audits while aligning with applicable regulations and industry standards. English and Spanish proficiency is essential, with occasional travel required.

Qualifications

• Experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC).
• Strong understanding of ISO 27001 and risk assessment methodologies.
• Experience with security frameworks such as ISO 27001, NIST, or ISF.
• Knowledge of technology risk management within enterprise environments.
• Experience supporting audits, compliance activities, or security governance programs.
• Excellent communication and stakeholder management skills.
• Professional working proficiency in both English and Spanish.

Responsibilities

• Manage information security and compliance risks across business operations and service delivery.
• Partner with business stakeholders to understand critical security requirements and emerging risk scenarios.
• Lead risk assessments and control reviews for strategic client accounts.
• Provide recommendations to mitigate identified risks and strengthen security controls.
• Support security incident investigations and coordinate with incident management teams when required.
• Conduct annual security risk assessments and ongoing compliance activities.
• Lead and coordinate ISO 27001 audit activities, working closely with auditors and internal stakeholders.
• Ensure systems, processes, and policies align with ISO 27001 requirements, applicable regulations, and industry standards.
• Collaborate with cross-functional teams including Legal, HR, Privacy, IT, and business leadership.
• Evaluate compliance with contractual security obligations, internal policies, and regulatory requirements.

Skills

Information Security

IT Risk Management

IT Audit

Governance, Risk & Compliance

ISO 27001

NIST/ISF

Stakeholder Management

English & Spanish Proficiency

Job description

Cognizant is seeking a Business Information Risk Manager to guide security governance and risk management across client environments and corporate functions.

You will partner with stakeholders to understand critical security requirements, lead risk assessments, and coordinate ISO 27001 audits while aligning with applicable regulations and industry standards. English and Spanish proficiency is essential, with occasional travel required.