In this role you identify, assess and mitigate IT and cybersecurity risks across Eurofins' European operations. You will conduct risk assessments for laboratories, regional infrastructure, and central IT, collaborating with IT, security and business teams. You'll contribute to security and resilience initiatives, including phishing simulations and resilience exercises. Frequent travel across Europe is required as you shape risk-based improvements and report findings to leadership.Plan and perform IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT servicesEvaluate technical and organizational controls in areas such as network security, IAM, endpoint security, vulnerability management, cloud, logging/monitoring, backup and IT resilienceIdentify weaknesses and assess potential business impactChallenge existing security implementations when neededTranslate technical findings into clear business risks and pragmatic recommendationsProduce high-quality reports and present results to technical and non-technical stakeholdersFollow up on remediation actions and verify risk reductionMaintain strong relationships with IT,



security and business stakeholders3-7 years of relevant experience in cybersecurity, information security, IT risk, IT audit or related fieldExperience performing IT risk assessments, security assessments or IT auditsStrong understanding of risk management and cybersecurity principlesBroad technical understanding of networking, AD/Entra ID, IAM/MFA, endpoint security, vulnerability management, Windows/Linux, cloud security, SIEM, backup and disaster recoveryAbility to understand technical architectures and discuss risks credibly with engineersStrong analytical skills to distinguish significant risksExcellent written and verbal English communication for technical and non-technical audiencesStrong stakeholder management and negotiation skillsWillingness to travel frequently across EuropeKnowledge of NIS2, EU data protection and common cybersecurity frameworks is a plusEducation: university degree in Computer Science, Cybersecurity, Information Systems, Engineering or equivalent; certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 are advantageoustechnically curiouspragmaticnetworkingfirewallsActive Directory / Entra ID
#J-18808-Ljbffr

📌 Senior It Risk Officer - Barcelona
🏢 Eurofins
📍 Barcelona