Overview

In this role you identify, assess and mitigate IT and cybersecurity risks across Eurofins’ European operations. You will conduct risk assessments for laboratories, regional infrastructure, and central IT, collaborating with IT, security and business teams. You’ll contribute to security and resilience initiatives, including phishing simulations and resilience exercises. Frequent travel across Europe is required as you shape risk-based improvements and report findings to leadership.

Responsabilidades

- Plan and perform IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT services
- Evaluate technical and organizational controls in areas such as network security, IAM, endpoint security, vulnerability management, cloud, logging/monitoring, backup and IT resilience
- Identify weaknesses and assess potential business impact
- Challenge existing security implementations when needed
- Translate technical findings into clear business risks and pragmatic recommendations
- Produce high-quality reports and present results to technical and non-technical stakeholders
- Follow up on remediation actions and verify risk reduction
- Improve IT risk assessment methodologies
- Maintain strong relationships with IT, security and business stakeholders





Requisitos principales

- 3–7 years of relevant experience in cybersecurity, information security, IT risk, IT audit or related field
- Experience performing IT risk assessments, security assessments or IT audits
- Strong understanding of risk management and cybersecurity principles
- Broad technical understanding of networking, AD/Entra ID, IAM/MFA, endpoint security, vulnerability management, Windows/Linux, cloud security, SIEM, backup and disaster recovery
- Ability to understand technical architectures and discuss risks credibly with engineers
- Strong analytical skills to distinguish significant risks
- Excellent written and verbal English communication for technical and non-technical audiences
- Strong stakeholder management and negotiation skills
- Willingness to travel frequently across Europe
- Knowledge of NIS2, EU data protection and common cybersecurity frameworks is a plus
- Education: university degree in Computer Science, Cybersecurity, Information Systems, Engineering or equivalent; certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 are advantageous

- independent
- technically curious
- pragmatic
- networking
- firewalls
- Active Directory / Entra ID

📌 Senior IT Risk Officer (Barcelona)
🏢 Eurofins
📍 Barcelona