Vendor Risk Analyst - Cybersecurity & Business Continuity

Santander USA; Boadilla del Monte; Presencial; EUR 40.000 - 80.000; Jornada completa

Descripción de la vacante

An established industry player is seeking a Vendor Risk Analyst to join their dynamic team in Madrid. This role involves certifying critical services and vendors, collaborating with cybersecurity teams, and supporting vendor risk management. The ideal candidate will have a strong background in cybersecurity and IT risk, with excellent communication skills. Join a forward-thinking company dedicated to fostering a risk-aware culture and helping businesses thrive through effective vendor management. This is an exciting opportunity to contribute to the transformation of the financial sector while working in a collaborative environment.

Formación

• 2-3 years experience in Cybersecurity, IT Risk, or IT Audit.
• Bachelor's degree in Computer Science or related fields.

Responsabilidades

• Certify critical services/vendors and monitor remediation plans.
• Collaborate with CISO and Business Continuity teams on risk assessments.

Conocimientos

Cybersecurity

IT Risk

IT Audit

Communication Skills

Analytical Skills

Educación

Bachelor's degree in Computer Science

Industry certifications (CISA, ISO/IEC 27001)

Herramientas

ISO 27001

NIST CSF

SOC 2

COBIT

Descripción del empleo

Vendor Risk Analyst - Cybersecurity & Business Continuity

Country: Spain

Vendor Risk Assessment Center is looking for a VENDOR RISK ANALYST – CYBERSECURITY & BUSINESS CONTINUITY based in our Madrid HQ office.

WHY YOU SHOULD CONSIDER THIS OPPORTUNITY

At Santander (www.santander.com), we are key players in transforming the financial sector. Do you want to join us?

At Aquanima, we provide valuable services to our customers. We are part of the Santander Group and aim to maximize efficiency through purchasing process management across 12 countries. Our services include supplier management, contract management, and more, fostering long-term relationships and operational efficiency.

Santander is committed to equal opportunities and fostering a risk-aware culture. Our mission is to help people and businesses prosper, with all professionals expected to approach risk proactively and responsibly.

WHAT YOU WILL BE DOING

• Certificate critical services/vendors, establish and monitor remediation plans, and issue residual risk ratings.
• Review and challenge inherent risk scoring of critical services.
• Collaborate with CISO and Business Continuity teams on risk assessment results.
• Support key account management for vendor risk services within Santander Group.
• Provide periodic reports to local Cost / Risk areas and committees.

REQUIREMENTS

Experience

• Minimum 2-3 years in Cybersecurity, IT Risk, or IT Audit.

Education

• Bachelor's degree or equivalent in Computer Science, Telecommunications, or related fields. Industry certifications such as CISA, ISO/IEC 27001, CompTIA Security+, CISP, SSCP, CSX are preferred.

Skills & Knowledge

• Knowledge of IT security frameworks (ISO 27001, NIST CSF, SOC 2, COBIT, etc.).
• Understanding of IT Audit, Risk Management, Business Continuity, Vulnerability Management, Security Testing (OWASP, OSSTMM).
• Fluent English communication skills (B2 level).

OTHER INFORMATION

- Ability to manage multiple tasks and work as part of a team.

- Strong communication and writing skills.

- Attention to detail and analytical skills are preferred.

For more information, follow us on LinkedIn or visit our website betechwithsantander.com.