## Information Risk Specialist – 2nd Line of DefenseAplikujremote type: Hybridlocations: Madridtime type: Full timeposted on: Opublikowano dzisiajjob requisition id: REQ2707615#

Presente su candidatura después de leer los siguientes requisitos de habilidades y cualificaciones para este puesto.

Do you want to play a key role in strengthening the digital resilience of a leading Top Employer in Spain?

Digital resilience is no longer optional.

New technologies, fast‐moving regulation and evolving cyber risks are reshaping how organisations protect their customers and operate with confidence.At

Nationale‐Nederlanden Spain

, Information Risk Management plays a central role in this challenge.

Within this context, the Second Line of Defense continues to strengthen how technology and information risks are understood, challenged and managed across the organisation.## Why this role mattersThis position sits at the intersection of technology, security, regulation and business

.

Its purpose is to bring clarity to complex risk topics and enable secure, responsible decision‐making in areas such as cloud, AI, data protection and emerging technologies.The role offers real influence, working closely with technology, security and business teams, as well as visibility at senior‐management level.## What makes Nationale‐Nederlanden Spain an attractive environment

Recognised as

Top Employer Spain

Hybrid work model and flexible schedule A stable organisation with a strong digital and innovation roadmap

Continuous learning and support for security and risk certifications

Exposure to strategic initiatives: AI governance, DORA, GDPR, cloud and new technologies

Competitive benefits: life insurance, pension plan, versátil compensation, telework and meal allowance

Wellness programme, volunteering initiatives and free parking with EV charging





Digital culture supported by agile ways of working## What you will take ownership of

Shaping how IT security frameworks and standards (ISO 27001/27002, COBIT, ISF) are applied and challenged across the organisation

Translating regulations such as GDPR, DORA, EIOPA and the AI Act into practical, actionable guidance

Evaluating whether IT controls, processes and architectures effectively manage real risks

Interpreting insights from penetration tests, vulnerability scans and threat‐modelling

Providing independent risk input to major technology projects and change initiatives

Reviewing incidents, remediation plans and audit findings to strengthen resilience

Assessing vendor and third‐party risks together with asset owners

Acting as a trusted advisor for management and business teams on information‐risk topics

Supporting AI‐related initiatives from a risk and governance perspective## What helps you succeed in this role

4+ years of experience in IT Risk, Information Security, IT Audit or similar areas

Strong understanding of security frameworks and regulatory environments

Ability to translate technical cybersecurity risks into clear, business‐focused guidance

Confidence working with both technical and non‐technical stakeholders

Analytical mindset, curiosity and a proactive approach

- English proficiency for collaboration in an international contextIf you are interested in a role where your expertise directly influences how a leading organisation manages technology and information risk, feel free to reach out or start a conversation.

In Nationale-Nederlanden we are committed with diversity.

We are proud to be an inclusive organization and we offer equal opportunities, regardless of race, cultural background, gender, gender identity, religion, national origin, age, disability, marital status, and sexual orientation. xqbhyrx

One of our core values is taking care of our employees so they can give their best within a respectful environment.

📌 Information Risk Specialist – 2nd Line of Defense (Madrid)
🏢 Nn
📍 Madrid