Risk & Compliance Associate – IT & Cyber Risk
WHAT YOU WILL BE DOING
As a Risk & Compliance Associate specialized in IT & Cyber Risk, you will play a key role in the identification, assessment, and oversight of technology and cybersecurity risks across our platforms, products, and services.
You will act as a second line of defense, providing independent challenge to IT/Cyber , ensuring alignment with internal policies and regulatory requirements.
We need someone like you to help us on the following fronts:
-
Identify, assess and monitor IT and Cyber risks across systems, platforms, and digital products
-
Perform independent risk oversight and challenge over IT, Cybersecurity
-
Contribute to the definition and evolution of the IT & Cyber Risk Management Framework, aligned with regulatory requirements (e.g. DORA)
-
Define and monitor Key Risk Indicators (KRIs) and support risk appetite frameworks
-
Assess risks related to cloud environments, infrastructure, and technology architecture
-
Evaluate and challenge controls design and effectiveness,
ensuring proper risk mitigation
-
Support the identification and management of ICT third-party / vendor risks
-
Lead risk assessments (RCSA), control testing and risk reporting activities
-
Contribute to operational resilience initiatives. (identification of critical services, mapping of dependencies, testing, etc.)
-
Collaborate with internal stakeholders and local units to ensure consistent risk management practices across subsidiaries
-
Support internal and external audits and regulatory interactions when required
WHAT WE ARE LOOKING FOR
EXPERIENCE
-
+5 years of experience in IT Risk, Cyber Risk or Technology Risk Management, preferably within financial services or regulated environments (payments industry is a plus)
-
Proven experience in second line of defence (risk oversight / control functions)
EDUCATION
Required
-
Bachelor’s degree in Computer Engineering, Telecommunications, Mathematics, Physics, o
📌 IT Risk (Madrid)
🏢 Getnet
📍 Madrid