Santander ( is evolving from Country: Spaina integral, high-impact brand into a technology-driven organization, and our people are at the heart of this journey.
Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what's possible. It's a chance for driven professionals to grow, learn, and make a real difference .
Our mission is to contribute to help more people and businesses prosper.
We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management. Santander Corporate & Investment Banking (Santander CIB) is Santander's global division that supports some of the world's most complex and sophisticated corporate and institutional clients, offering customized services and value-added wholesale products to best meet their needs.THE DIFFERENCE YOU MAKESCIB s looking for a Senior Analyst — Cybersecurity Risk (2LoD) based out of Boadilla (Madrid) .
We're shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas.
To succeed in this role, you will be responsible for: Lead 2LoD review & challenge of cybersecurity risk assessments, control evaluations, risk metrics, mitigation plans and risk acceptances; synthesize into clear risk opinions for senior stakeholders. Run targeted risk reviews of priority domains (e.G., IAM, network/firewall, vulnerability & patch management, cloud security, App Sec/containers, encryption/tokenization, DLP, logging/monitoring, incident response/SOC); track remediation to closure. Provide independent oversight on digital transformation and business change, assessing cyber risk impacts and required controls from design to go-live. Strengthen third-party/critical services risk management: certify services/vendors,



challenge inherent risk scoring, assign residual risk ratings, and monitor cyber risk data (incidents—internal/external, KRIs, control gaps, risk register) to identify patterns, concentrations, and emerging hotspots. Evolve and transpose policies/frameworks to steer safe technology adoption; align to industry standards. Prepare clear, decision-ready governance reporting for committees and working groups; escape issues with urgency and evidence. What You'll Bring Our people are our greatest strength.
Every individual contributes unique perspectives that make us stronger as a team and as an organization.
We're enabling teams to go beyond by valuing who they are and empowering what they bring. Professional Experience~5–8 years in cybersecurity risk, technology risk, cyber audit or 2LoD/3LoD roles in financial services or other highly regulated environments.
(Required)Education Bachelor's in Computer Science, Engineering or related (Required)Master's a plus.
(Prefered)Professional certifications strongly valued: CISA, CISM, CRISC, CISSP; plus cloud security (AWS/Azure/GCP).
(Required)Languages Fluent English (Required)Technical expertise(you don't need all, but you know many)IAM, network & firewall management, vulnerability/patch management, cloud security architecture, secure SDLC & containerization, encryption/tokenization, DLP, security logging & monitoring, incident detection & response, and offensive security understanding. Frameworks & practicesNIST CSF, ISO ***********, COBIT, SOC 2/ISAE ****, OWASP; proven experience executing cyber risk oversight programs in 2LoD/3LoD. How You Work Strong risk judgment and documentation quality; ability to coordinate across teams, influence constructively, and drive issues to closure in a matrixed, international setting. What's In It For You Real impact on the cyber resilience of a global

📌 Risk Technology Risk & Cybersecurity Specialist Iii (España)
🏢 Santander Corporate & Investment Banking
📍 España