Role Overview

Asegúrese de leer la descripción completa a continuación y, si confía en que cumple todos los requisitos, envíe su solicitud de inmediato.

We are seeking a Senior InfoSec & IT Risk Analyst who combines deep information security and IT risk management expertise with a modern, process-automation mindset. In this role, you will lead the InfoSec & IT risk governance framework, serving as a primary Risk Champion across business and technology units. You will oversee the execution of 360° risk assessments, Key Risk Indicators (KRIs), high level Risk Registers, and multi-cloud security governance (AWS, Azure, GCP), ensuring our operations remain secure, compliant, and transparent. The idóneo candidate acts as a strategic bridge between technical security engineering, group risk controllers, and executive leadership.

Key ResponsibilitiesInfoSec & IT Risk Framework Management

- Execute annual 360° risk assessments across core systems, driving the transition toward dynamic and semi-automated risk evaluation workflows.
- Design, deliver, and continuously evolve High Level Risk Registers in close alignment with regulatory standards and Group Risk baselines.
- Manage the lifecycle of Risk Acceptance Letters (RALs) and ad-hoc risk assessments, establishing operational metrics to measure and reduce "time-to-market".
- Act as the lead Risk Champion for InfoSec and IT, coordinating risk mitigation strategies and controls across business and technical domains.

Security Governance, KRIs & Vulnerability Oversight

- Evolve, calculate,



and report Key Risk Indicators (KRIs) in partnership with the Group Risk Team, leveraging GRC and risk management tools (e.g., Pentana/Ideagen).
- Oversee regular reporting on Security Incidents, Threats, and Vulnerabilities, conducting root-cause analyses on high-risk security threats.
- Enforce realistic remediation plans for critical vulnerabilities (Class A and B) and drive the maturity of DevOps pipeline weakness management.
- Oversee Security Exceptions management, malware controls, and remediation plans for unsupported and legacy systems.

Cloud Security Governance

- Validate and monitor security hardening rules and posture across multi-cloud environments (AWS, Azure, GCP) using cloud security platforms (e.g., WIZ).
- Maintain high security baselines across production clouds, ensuring compliance targets (>95%) are consistently achieved across critical cloud accounts.
- Define and implement Cloud RACI matrices to establish clear cloud security governance across Cloud Engineering, DevOps, and Security teams.

Stakeholder Management & Risk Communication

- Tailor risk reports and executive communications to non-technical audiences, translating complex security data into clear business insights.
- Serve as the central liaison between IT/InfoSec engineering, Operational Risk Controllers, Group Risk, and external auditors. xqbhyrx
- Lead risk mitigation initiatives, tracking deliverables, key SLAs, and milestones to provide progress updates to leadership.

📌 Senior InfoSec (Fuentes de Andalucía)
🏢 Admiral Europe Tech
📍 Fuentes de Andalucía