Referencia: JN-1 Publicado el: 2026-10-09Ubicación: Barcelona, España, ESTipo de contrato: Jornada completaEmpresa: Michael PageSector: TecnologíaSub Sector: SeguridadIndustria: Technology & TelecomsLocalización: BarcelonaTipo de Contracto: PermanenteNombre del consultor: Jordi AlumaModalidad de trabajo: Remoto / híbridoStrategic visibility and business impactBroad GRC exposure in a mature security environment Dónde vas a trabajar? Multinational company. DescripciónIdentify, assess, document, and manage cyber security risks across technology, business processes, projects, and third parties.

Las cualificaciones, habilidades y toda la experiencia relevante necesaria para este puesto se pueden encontrar en la descripción completa a continuación.

Maintain and improve the Cyber Security Risk Management framework aligned with NIST, ISO 27001, CIS, and business requirements.

Support business stakeholders in understanding and managing security risks.

Support the development, maintenance, and continuous improvement of the Information Security Management System (ISMS).Assist with ISO 27001 certification activities, surveillance audits, and internal control reviews.

Monitor compliance with security policies, standards, and regulatory obligations.

Perform security assessments of suppliers, partners, and service providers.

Work with Procurement, Legal, Privacy, and Technology teams to ensure third-party risks are appropriately managed.

Support ongoing monitoring of critical vendor security posture.

Support the delivery of the global Cyber Security Awareness Programme.

Create and maintain awareness content, campaigns, phishing simulations, communications, and training materials.

Promote a positive security culture across the organisation.

Develop, review, and maintain security policies, standards, procedures, and guidelines.

Ensure documentation remains aligned to industry standards and business objectives.





Assist business and technology teams with policy interpretation and implementation.

Collaborate with Cyber Security Operations and Cyber Security Architecture teams to improve the overall security posture. A quién buscamos (H/M/D)?EssentialExperience working in Cyber Security Governance, Risk & Compliance (GRC), Security Management, or Information Security roles.

Experience with ISO 27001, NIST Cybersecurity Framework, CIS Controls, or similar frameworks.

Experience conducting security risk assessments and security control reviews.

Experience supporting audits, compliance activities, and assurance programmes.

Experience performing vendor or third-party security assessments.

Strong understanding of information security principles and cyber risk management.

DesirableISO 27001 Lead Implementer or Lead Auditor certification. CISSP, CISM, CRISC, or equivalent certification.

Experience with OneTrust, CyberVadis, ServiceNow, Jira, or GRC platforms.

Experience delivering security awareness programmes.

Experience supporting Data Protection Impact Assessments (DPIAs).Skills & CompetenciesStrong analytical and problem-solving skills. Excellent written and verbal communication skills. Ability to translate technical security concepts into business language.

Strong stakeholder management and influencing skills. Ability to work independently and manage multiple priorities.

High attention to detail and quality.

Strong presentation and reporting capabilities.

Collaborative mindset with experience working in general, multicultural environments. Cuáles son tus beneficios? xugodme

Competitive salary aligned with your experiencePermanent, full-time contractMeal vouchersPrivate health insuranceLife InsuranceHybrid working model (2 days of home office/week)Multicultural environmentTraining and internal development opportunitiesA vibrant and dynamic international workplace located in Barcelona

Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

📌 Cyber Security Analyst (Hybrid in Barcelona)
🏢 Michael Page International
📍 Barcelona