OverviewIn this role, you support governance, risks, and vulnerabilities programs to strengthen information security and IT controls.
You will collaborate with cross-functional teams to implement security strategies and maintain control frameworks.
You lead security assessments, risk management, and audit activities to ensure regulatory compliance and continuous improvement.
The position offers a chance to shape security posture across the organization and its partners, in a dynamic, international setting.
ResponsabilidadesAct as local Security POC for Country and Regional teams incidents and requests, coordinating with InfoSec groups to remediate
Influence decision making through security-architecture collaboration with stakeholders
Assist Regional InfoSec, Security Architecture & Engineering and IT Ops to implement security projects and targets
Maintain and develop risk control frameworks and processes for effective monitoring, management, and mitigation
Perform risk assessments and manage risks across the organization and vendors, driving standardization of control practices
Develop security standards, procedures, policies, and improve security posture via process automation and capability evolution
Automate and monitor information security and IT controls, exceptions, risks, vulnerabilities, testing across data activities and entities




Lead and control the full audit cycle for information security and IT controls, ensuring compliance with directives and regulations
Requisitos principalesBachelor in Computer Information Systems or related discipline
~5 years experience as system administrator (Linux or Windows)
~2 years direct experience in information security focusing on risk analysis
Experience defining and executing risk control frameworks for internal and third-party partners
Experience conducting information security assessments and working with international standards
Ability to manage risks, vulnerabilities, and non-conformities with remediation
KPIs/KRIs reporting for varied stakeholders
Experience with audits (internal, external, third-party) and remediation planning
Knowledge of PCI DSS, SOC 2, NIST, GDPR, COBIT, ITIL, etc.
Fluent English communication; travel availability
Proficiency with MS Office, at least one GRC tool
Knowledge of IAM (Microsoft Entra-ID), vulnerability management, and business continuity
Experience with Windows/Azure and/or Linux and AWS
Familiarity with security tools (WAF, NACs, EDR)
Auditing and evidence compilation for audit responses
Problem solving
Effective communication
Team player
IAM in Microsoft platform (Entra-ID)
Windows/Azure
Linux

📌 Senior Regional Security Analyst (Madrid)
🏢 Verisure
📍 Madrid