Mission description

Manage cybersecurity risks across projects involving Salesforce, CRM and e‐commerce platforms.

Identify and assess implementation and operational risks throughout the project lifecycle.

Coordinate mitigation actions with technical, security and business stakeholders.

Monitor security controls, incidents and action plans, ensuring proper follow‐up and escalation when needed.

Contribute to GRC activities: risk registers, control frameworks, policies, and compliance follow‐up.

Support security governance: preparation of committees, reporting, and decision‐making support for management.

Job Description Join

Amaris Consulting

and manage

cybersecurity risks across strategic digital projects

(Salesforce, CRM, e‐commerce) for a

leading international group

in its sector. Be part of an

international cybersecurity & GRC team , grow in a

hybrid environment in Madrid , and develop your career within a

global organization

that values

ownership, collaboration, and technical excellence .

Your mission & impact As a

Senior Cybersecurity Project Manager – GRC & Digital Platforms (Salesforce / CRM / e‐commerce) , you will ensure that

cybersecurity risks are identified, assessed, mitigated and monitored

across key projects and platforms in an

international environment . You will work closely with

technical, security and business teams

to

coordinate mitigation plans, follow up on action plans and support security governance activities .

Mission description

Manage cybersecurity risks across projects involving Salesforce, CRM and e‐commerce platforms.

Identify and assess implementation and operational risks throughout the project lifecycle.

Coordinate mitigation actions with technical,



security and business stakeholders.

Monitor security controls, incidents and action plans, ensuring proper follow‐up and escalation when needed.

Contribute to GRC activities: risk registers, control frameworks, policies, and compliance follow‐up.

Support security governance: preparation of committees, reporting, and decision‐making support for management.

What we're looking for

5–8 years of experience managing cybersecurity projects.

Experience in GRC, cybersecurity risk management or security governance.

Proven experience identifying, assessing and tracking project and implementation risks.

Ability to coordinate mitigation plans with IT, security and business teams.

Knowledge of CRM, e‐commerce or other business‐critical applications.

Strong communication, organization and stakeholder management skills.

Salesforce experience is a strong plus.

High level of English for daily collaboration with international teams.

A proactive, structured and autonomous mindset, able to drive risk remediation and follow‐up without constant supervision.

What you will do (day‐to‐day)

Work with project managers and product owners to integrate cybersecurity requirements into project plans.

Lead risk assessments for Salesforce, CRM and e‐commerce projects (design, implementation, run).





Define and follow risk treatment plans: mitigation measures, responsible owners, deadlines and status.

Coordinate with security architects, engineers and business stakeholders to ensure controls are implemented.

Track and report on security incidents, non‐compliances and action plans related to your perimeter.

Prepare and present risk dashboards and KPIs to steering committees and management.

Contribute to policies, standards and procedures related to project security and application security governance.

Support awareness and communication on cybersecurity risks to project and business teams.

Your mindset & soft skills

Strong analytical and problem‐solving skills, applied to cybersecurity risks and prioritization.

Excellent stakeholder management: able to influence without direct authority and align diverse teams.

Confident in leading meetings, challenging decisions when needed, and defending security priorities.

Comfortable working in international and multicultural environments, adapting your communication to different audiences (technical, business, management).

Proactive, structured and autonomous, with a strong sense of ownership and accountability.

Nice to have

Hands‐on experience with Salesforce security or other major CRM / e‐commerce platforms.

Experience with risk management frameworks or security standards (ISO 27001, NIST, etc.).

Security or GRC certifications (e.g. CISM, CISSP, ISO 27005, ISO 27001 Lead Implementer/Auditor) are a plus.

Experience in multinational or multi‐country environments.

Why join us?

Join a fast‐growing integral consulting group with strong cybersecuri

📌 Senior PM Cibersecurity (España)
🏢 Amaris Consulting | Part of Mantu
📍 España