Role OverviewAsegúrese de leer la descripción completa a continuación y, si confía en que cumple todos los requisitos, envíe su solicitud de inmediato.We are seeking a Senior InfoSec & IT Risk Analyst who combines deep information security and IT risk management expertise with a modern, process-automation mindset. In this role, you will lead the InfoSec & IT risk governance framework, serving as a primary Risk Champion across business and technology units. You will oversee the execution of 360° risk assessments, Key Risk Indicators (KRIs), high level Risk Registers, and multi-cloud security governance (AWS, Azure, GCP), ensuring our operations remain secure, compliant, and transparent. The adecuado candidate acts as a strategic bridge between technical security engineering, group risk controllers, and executive leadership.Key ResponsibilitiesInfoSec & IT Risk Framework ManagementExecute annual 360° risk assessments across core systems, driving the transition toward dynamic and semi-automated risk evaluation workflows.Design, deliver, and continuously evolve High Level Risk Registers in close alignment with regulatory standards and Group Risk baselines.Manage the lifecycle of Risk Acceptance Letters (RALs) and ad-hoc risk assessments, establishing operational metrics to measure and reduce "time-to-market".Act as the lead Risk Champion for InfoSec and IT, coordinating risk mitigation strategies and controls across business and technical domains.Security Governance, KRIs & Vulnerability OversightEvolve, calculate,



and report Key Risk Indicators (KRIs) in partnership with the Group Risk Team, leveraging GRC and risk management tools (e.g., Pentana/Ideagen).Oversee regular reporting on Security Incidents, Threats, and Vulnerabilities, conducting root-cause analyses on high-risk security threats.Enforce realistic remediation plans for critical vulnerabilities (Class A and B) and drive the maturity of DevOps pipeline weakness management.Oversee Security Exceptions management, malware controls, and remediation plans for unsupported and legacy systems.Cloud Security GovernanceValidate and monitor security hardening rules and posture across multi-cloud environments (AWS, Azure, GCP) using cloud security platforms (e.g., WIZ).Maintain high security baselines across production clouds, ensuring compliance targets (>95%) are consistently achieved across critical cloud accounts.Define and implement Cloud RACI matrices to establish clear cloud security governance across Cloud Engineering, DevOps, and Security teams.Stakeholder Management & Risk CommunicationTailor risk reports and executive communications to non-technical audiences, translating complex security data into clear business insights.Serve as the central liaison between IT/InfoSec engineering, Operational Risk Controllers, Group Risk, and external auditors. xqbhyrx Lead risk mitigation initiatives, tracking deliverables, key SLAs, and milestones to provide progress updates to leadership.#J-18808-Ljbffr

📌 Senior InfoSec & IT Risk Analyst (Sevilla)
🏢 Admiral Europe Tech
📍 Sevilla