Experteer Overview In this role, you support governance, risks, and vulnerabilities programs to strengthen information security and IT controls. You will collaborate with cross-functional teams to implement security strategies and maintain control frameworks. You lead security assessments, risk management, and audit activities to ensure regulatory compliance and continuous improvement. The position offers a chance to shape security posture across the organization and its partners, in a dynamic, international setting.Compensaciones / Incentivos
- Act as local Security POC for Country and Regional teams incidents and requests, coordinating with InfoSec groups to remediate
- Influence decision making through security-architecture collaboration with stakeholders
- Assist Regional InfoSec, Security Architecture u0026 Engineering and IT Ops to implement security projects and targets
- Maintain and develop risk control frameworks and processes for effective monitoring, management, and mitigation
- Perform risk assessments and manage risks across the organization and vendors, driving standardization of control practices
- Develop security standards, procedures, policies, and improve security posture via process automation and capability evolution
- Automate and monitor information security and IT controls, exceptions, risks, vulnerabilities,



testing across data activities and entities
- Lead and control the full audit cycle for information security and IT controls, ensuring compliance with directives and regulationsResponsabilidades
- Bachelor in Computer Information Systems or related discipline
- ~5 years experience as system administrator (Linux or Windows)
- ~2 years direct experience in information security focusing on risk analysis
- Experience defining and executing risk control frameworks for internal and third-party partners
- Experience conducting information security assessments and working with international standards
- Ability to manage risks, vulnerabilities, and non-conformities with remediation
- KPIs/KRIs reporting for varied stakeholders
- Experience with audits (internal, external, third-party) and remediation planning
- Knowledge of PCI DSS, SOC 2, NIST, GDPR, COBIT, ITIL, etc.
- Fluent English communication; travel availability
- Proficiency with MS Office, at least one GRC tool
- Knowledge of IAM (Microsoft Entra-ID), vulnerability management, and business continuity
- Experience with Windows/Azure and/or Linux and AWS
- Familiarity with security tools (WAF, NACs, EDR)
- Auditing and evidence compilation for audit responsesRequisitos principales
-

📌 Senior Regional Security Analyst (Madrid)
🏢 Verisure
📍 Madrid