In this role you identify, assess and mitigate IT and cybersecurity risks across Eurofins' European operations. You will conduct risk assessments for laboratories, regional infrastructure, and central IT, collaborating with IT, security and business teams. You'll contribute to security and resilience initiatives, including phishing simulations and resilience exercises. Frequent travel across Europe is required as you shape risk-based improvements and report findings to leadership.

Se anima a todos los posibles solicitantes a que se desplacen y lean la descripción completa del puesto antes de presentar su candidatura.
Plan and perform IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT services
Evaluate technical and organizational controls in areas such as network security, IAM, endpoint security, vulnerability management, cloud, logging/monitoring, backup and IT resilience
Identify weaknesses and assess potential business impact
Challenge existing security implementations when needed
Translate technical findings into clear business risks and pragmatic recommendations
Produce high-quality reports and present results to technical and non-technical stakeholders
Follow up on remediation actions and verify risk reduction
Maintain strong relationships with IT,



security and business stakeholders
3-7 years of relevant experience in cybersecurity, information security, IT risk, IT audit or related field
Experience performing IT risk assessments, security assessments or IT audits
Strong understanding of risk management and cybersecurity principles
Broad technical understanding of networking, AD/Entra ID, IAM/MFA, endpoint security, vulnerability management, Windows/Linux, cloud security, SIEM, backup and disaster recovery
Ability to understand technical architectures and discuss risks credibly with engineers
Strong analytical skills to distinguish significant xcskxlj risks
Excellent written and verbal English communication for technical and non-technical audiences
Strong stakeholder management and negotiation skills
Willingness to travel frequently across Europe
Knowledge of NIS2, EU data protection and common cybersecurity frameworks is a plus
Education: university degree in Computer Science, Cybersecurity, Information Systems, Engineering or equivalent; certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 are advantageous
technically curious
pragmatic
networking
firewalls
Active Directory / Entra ID

#J-18808-Ljbffr

📌 Senior It Risk Officer - Barcelona
🏢 Eurofins
📍 Barcelona