Chez Roche, vous pouvez être vous-même et être apprécié pour les qualités uniques que vous apportez. Notre culture encourage l'expression personnelle, le dialogue ouvert et les connexions authentiques, où vous êtes valorisé, accepté et respecté pour ce que vous êtes, vous permettant de prospérer tant personnellement que professionnellement. Voici comment nous visons à prévenir, arrêter et guérir les maladies et à garantir à chacun l'accès aux soins de santé aujourd'hui et pour les générations à venir. Rejoignez Roche, où chaque voix compte.

La position
Job description

At Roche, protecting our critical information assets and systems is foundational to delivering life-changing medicines. As the IT Security Risk & Audit Specialist, you will move beyond standard checklists to manage and coordinate the end-to-end security risk lifecycle. You will bridge the gap between technical security engineering and executive risk posture, assuring our integral systems and third-party ecosystems remain resilient against an evolving threat landscape.

Description of the area





Job Responsibilities

Risk Assessment: Support comprehensive security risk assessments and audits using frameworks like NIST CSF and ISO 27001 to identify vulnerabilities in systems, cloud services, and emerging technologies.

Third-Party Cyber Risk Management: Execute security, privacy and quality evaluations of global vendors, focusing on supply chain integrity, data sovereignty, and breach notification capabilities. Follow up with the vendors on open finding and their remediation status.

Audit Assurance: Support internal and external security audits and provide guidance on remediation findings

Continuous Compliance Monitoring: Design and implement automated tools to monitor the effectiveness of security controls in real-time, moving the organization toward data-driven monitoring. Monitor security compliance on critical systems and vendors.

OT & Manufacturing Protection: Support the evaluation of the securit

📌 Security Risk and Audit Specialist (Madrid)
🏢 Roche Holding
📍 Madrid