Role Overview We are seeking a

Senior InfoSec & IT Risk Analyst

who combines deep information security and IT risk management expertise with a modern, process-automation mindset. In this role, you will lead the InfoSec & IT risk governance framework, serving as a primary

Risk Champion

across business and technology units. You will oversee the execution of 360° risk assessments, Key Risk Indicators (KRIs), high level Risk Registers, and multi-cloud security governance (AWS, Azure, GCP), ensuring our operations remain secure, compliant, and transparent. The idóneo candidate acts as a strategic bridge between technical security engineering, group risk controllers, and executive leadership. Key Responsibilities

InfoSec & IT Risk Framework Management

Execute annual 360° risk assessments across core systems, driving the transition toward dynamic and semi-automated risk evaluation workflows. Design, deliver, and continuously evolve High Level Risk Registers in close alignment with regulatory standards and Group Risk baselines. Manage the lifecycle of Risk Acceptance Letters (RALs) and ad-hoc risk assessments, establishing operational metrics to measure and reduce "time-to-market". Act as the lead Risk Champion for InfoSec and IT, coordinating risk mitigation strategies and controls across business and technical domains. Security Governance, KRIs & Vulnerability Oversight

Evolve, calculate, and report Key Risk Indicators (KRIs) in partnership with the Group Risk Team,



leveraging GRC and risk management tools (e.g., Pentana/Ideagen). Oversee regular reporting on Security Incidents, Threats, and Vulnerabilities, conducting root-cause analyses on high-risk security threats. Enforce realistic remediation plans for critical vulnerabilities (Class A and B) and drive the maturity of DevOps pipeline weakness management. Oversee Security Exceptions management, malware controls, and remediation plans for unsupported and legacy systems. Cloud Security Governance

Validate and monitor security hardening rules and posture across multi-cloud environments (AWS, Azure, GCP) using cloud security platforms (e.g., WIZ). Maintain high security baselines across production clouds, ensuring compliance targets (>95%) are consistently achieved across critical cloud accounts. Define and implement Cloud RACI matrices to establish clear cloud security governance across Cloud Engineering, DevOps, and Security teams. Stakeholder Management & Risk Communication

Tailor risk reports and executive communications to non-technical audiences, translating complex security data into clear business insights. Serve as the central liaison between IT/InfoSec engineering, Operational Risk Controllers, Group Risk, and external auditors. Lead risk mitigation initiatives, tracking deliverables, key SLAs, and milestones to provide progress updates to leadership.

#J-18808-Ljbffr

📌 Senior InfoSec & IT Risk Analyst (Sevilla)
🏢 Admiral Europe Tech
📍 Sevilla