Strategic Security Risk & Audit Lead

Roche; Madrid; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

Roche is seeking an IT Security Risk & Audit Specialist to protect our critical information assets and systems. You will bridge security engineering with executive risk posture and ensure resilience across global systems and third-party ecosystems.

Responsibilities include risk assessments, third-party risk management, audit support, continuous monitoring, and OT/ manufacturing protection. Relevant certifications and 3+ years in security risk roles are highly valued.

Formación

• University degree in cybersecurity or related field; master’s preferred.
• 3+ years in security risk, audit or compliance in a global enterprise.
• Active CISSP, CISM or CISA certifications preferred; CRISC or ISO 27001 Lead Auditor a plus.

Responsabilidades

• Risk Assessment: support comprehensive security risk assessments and audits using frameworks like NIST CSF and ISO 27001.
• Third-Party Cyber Risk Management: evaluate global vendors for security, privacy and quality; follow up on findings.
• Audit Assurance: support internal and external audits and remediation guidance.
• Continuous Compliance Monitoring: design automated monitoring of security controls in real time.
• OT & Manufacturing Protection: evaluate security posture of OT environments for availability and protection.

Conocimientos

ISO 27001

NIST CSF

GDPR HIPAA

ITIL

Audit automation

Data protection

Educación

Bachelor’s degree in Cybersecurity/CS/related

Master’s degree preferred

Active CISSP/CISM/CISA certifications

Descripción del empleo

Roche is seeking an IT Security Risk & Audit Specialist to protect our critical information assets and systems. You will bridge security engineering with executive risk posture and ensure resilience across global systems and third-party ecosystems.

Responsibilities include risk assessments, third-party risk management, audit support, continuous monitoring, and OT/ manufacturing protection. Relevant certifications and 3+ years in security risk roles are highly valued.