Santander ( is evolving from
Country: Spain
a global, high-impact brand into a technology-driven organization, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible.
It’s a chance for driven professionals to grow, learn, and make a real difference .
Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management.
Santander Corporate & Investment Banking (Santander CIB) is Santander's global division that supports some of the world's most complex and sophisticated corporate and institutional clients, offering customized services and value-added wholesale products to best meet their needs.
THE DIFFERENCE YOU MAKE
SCIB s looking for a Senior Analyst — Cybersecurity Risk (2LoD) based out of Boadilla (Madrid) .
We’re shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:
Lead 2LoD review & challenge of cybersecurity risk assessments, control evaluations, risk metrics, mitigation plans and risk acceptances;
synthesize into clear risk opinions for senior stakeholders.
Run targeted risk reviews of priority domains (e.G., IAM, network/firewall, vulnerability & patch management, cloud security, AppSec/containers, encryption/tokenization, DLP, logging/monitoring, incident response/SOC);
track remediation to closure.
Provide independent oversight on digital transformation and business change, assessing cyber risk impacts and required controls from design to go-live.
Strengthen third-party/critical services risk management: certify services/vendors,



challenge inherent risk scoring, assign residual risk ratings, and monitor remediation.
Analyze cyber risk data (incidents—internal/external, KRIs, control gaps, risk register) to identify patterns, concentrations, and emerging hotspots.
Evolve and transpose policies/frameworks to steer safe technology adoption;
align to industry standards.
Prepare clear, decision-ready governance reporting for committees and working groups;
escape issues with urgency and evidence.
What You’ll Bring
Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organization. We’re enabling teams to go beyond by valuing who they are and empowering what they bring.
Professional Experience
~5–8 years in cybersecurity risk, technology risk, cyber audit or 2LoD/3LoD roles in financial services or other highly regulated environments. (Required)
Education
Bachelor’s in Computer Science, Engineering or related (Required)
Master’s a plus. (Prefered)
Professional certifications strongly valued: CISA, CISM, CRISC, CISSP;
plus cloud security (AWS/Azure/GCP). (Required)
Languages
Fluent English (Required)
Technical expertise
(you don’t need all, but you know many)
IAM, network & firewall management, vulnerability/patch management, cloud security architecture, secure SDLC & containerization, encryption/tokenization, DLP, security logging & monitoring, incident detection & response, and offensive security understanding.
Frameworks & practices
NIST CSF, ISO 27001/22301, COBIT, SOC 2/ISAE 3000, OWASP;
proven experience executing cyber risk oversight programs in 2LoD/3LoD.
How You Work
Strong risk judgment and documentation quality;
ability to coordinate across teams, influence constructively, and drive issues to closure in a matrixed, international setting.
What’s In It For You
Real impact on the cyber resilience of a integral

📌 Risk Technology Risk & Cybersecurity Specialist Iii (Boadilla del Monte)
🏢 Santander Corporate & Investment Banking
📍 Boadilla del Monte