At Roche you can show up as yourself, embraced for the unique qualities you
bring. Our culture encourages personal expression, open dialogue, and genuine
connections, where you are valued, accepted and respected for who you are,
allowing you to thrive both personally and professionally. This is how we aim to
prevent, stop and cure diseases and ensure everyone has access to healthcare
today and for generations to come. Join Roche, where every voice matters.

THE POSITION

Job description

At Roche, protecting our critical information assets and systems is foundational
to delivering life-changing medicines. As the IT Security Risk & Audit
Specialist, you will move beyond standard checklists to manage and coordinate
the end-to-end security risk lifecycle. You will bridge the gap between
technical security engineering and executive risk posture, assuring our global
systems and third-party ecosystems remain resilient against an evolving threat
landscape.

Description of the area

Job Responsibilities

* Risk Assessment: Support comprehensive security risk assessments and audits




using frameworks like NIST CSF and ISO 27001 to identify vulnerabilities in
systems, cloud services, and emerging technologies.

* Third-Party Cyber Risk Management: Execute security, privacy and quality
evaluations of general vendors, focusing on supply chain integrity, data
sovereignty, and breach notification capabilities. Follow up with the vendors
on open finding and their remediation status.

* Audit Assurance: Support internal and external security audits and provide
guidance on remediation findings

* Continuous Compliance Monitoring: Design and implement automated tools to
monitor the effectiveness of security controls in real-time, moving the
organization toward data-driven monitoring. Monitor security compliance on
critical systems and vendors.

* OT & Manufacturing Protection: Support the evaluation of the security
posture of Manufacturing and Operational Technology (OT) environments to

📌 Security Risk and Audit Specialist (Madrid)
🏢 Roche
📍 Madrid