Risk & Compliance Associate – IT & Cyber RiskWHAT YOU WILL BE DOINGAs a Risk & Compliance Associate specialized in IT & Cyber Risk, you will play a key role in the identification, assessment, and oversight of technology and cybersecurity risks across our platforms, products, and services.You will act as a second line of defense, providing independent challenge to IT/Cyber, ensuring alignment with internal policies and regulatory requirements.We need someone like you to help us on the following fronts:Identify, assess and monitor IT and Cyber risks across systems, platforms, and digital productsPerform independent risk oversight and challenge over IT, CybersecurityContribute to the definition and evolution of the IT & Cyber Risk Management Framework, aligned with regulatory requirements (e.G. DORA)Define and monitor Key Risk Indicators (KRIs) and support risk appetite frameworksAssess risks related to cloud environments, infrastructure, and technology architectureEvaluate and challenge controls design and effectiveness, ensuring proper risk mitigationSupport the identification and management of ICT third-party / vendor risksLead risk assessments (RCSA), control testing and risk reporting activitiesContribute to operational resilience initiatives. (identification of critical services, mapping of dependencies, testing, etc.)Collaborate with internal stakeholders and local units to ensure consistent risk management practices across subsidiariesSupport internal and external audits and regulatory interactions when requiredWHAT WE ARE LOOKING FOREXPERIENCE+5 years of experience in IT Risk, Cyber Risk or Technology Risk Management, preferably within financial services or regulated environments (payments industry is a plus)Proven experience in second line of defence (risk oversight / control functions)EDUCATIONRequiredBachelor’s degree in Computer Engineering,



Telecommunications, Mathematics, Physics, or related fieldsSKILLS & KNOWLEDGEKnowledge of payments ecosystem, acquiring business and PSD2 is a strong plusStrong knowledge of IT & Cyber Risk frameworks and standards (e.G. ISO 27001, NIST, COBIT)Strong knowledge of Operational resilience and business continuity frameworks (i.E: DORA) and its implications on IT and Cyber risk managementExperience in:IT controls and cybersecurity practicesCloud risk and technology environmentsFamiliarity with Third-party risk management with focus on IT, Cyber and resilienceStrong analytical and problem-solving skills, with the ability to translate technical risks into business impactAbility to challenge stakeholders constructively and influence decision-makingExcellent communication skills (written and verbal), with experience interacting with senior stakeholdersHigh level of EnglishDESIRED CERTIFICATIONSCISA, CRISC, CISSP, CISM or similarITIL or other IT governance certificationsThe PagoNxt entity advertising the job to which you are applying will process your personal information as data controller to assess your suitability for the position and manage the recruitment process.If you are applying for a job in the EU, the lawful basis to process your data is the necessity to take steps to assess your suitability for the offered position (art. 6.1b GDPR). If applying outside the EU, the lawful basis is your consent. To exercise your privacy rights (including access, rectification, erasure, restrict processing, portability, object and not being subject to automated decisions or any other required by law), please write to the PagoNxt’s entity Data Protection Officer listed in our privacy notice or send an email to [email protected]. You may also submit a complaint to the relevant supervisory authority.Please read the details of processing in our Privacy Notice:#J-18808-Ljbffr

📌 It Risk & Compliance Associate (España)
🏢 Getnet
📍 España