About the Role
Experiencia, cualificaciones y habilidades interpersonales, ¿tiene todo lo necesario para triunfar en esta posibilidad? Descúbralo a continuación. The Business Information Security (BIS) team plays a critical role in ensuring security risks across business delivery and client engagements are effectively managed end-to-end. As a Business Information Risk Manager, you will act as a trusted advisor to business stakeholders, helping to strengthen security governance, drive compliance initiatives, and support risk management activities across multiple client environments and corporate functions.

Key Responsibilities
* Manage information security and compliance risks across business operations and service delivery.
* Partner with business stakeholders to understand critical security requirements and emerging risk scenarios.
* Lead risk assessments and control reviews for strategic client accounts.
* Provide recommendations to mitigate identified risks and strengthen security controls.
* Support security incident investigations and coordinate with incident management teams when required.
* Conduct annual security risk assessments and ongoing compliance activities.
* Lead and coordinate ISO 27001 audit activities, working closely with auditors and internal stakeholders.
* Ensure systems, processes, and policies align with ISO 27001 requirements, applicable regulations, and industry standards.
* Collaborate with cross-functional teams including Legal, HR, Privacy, IT, and business leadership.
* Evaluate compliance with contractual security obligations,



internal policies, and regulatory requirements. What We're Looking For Essential Experience
* Experience in Information Security, IT Risk Management, IT Audit, Governance, Risk & Compliance (GRC), or a related discipline.
* Strong understanding of ISO 27001 Information Security Management Systems and risk assessment methodologies.
* Experience working with security frameworks such as ISO 27001, NIST, or ISF.
* Knowledge of technology risk management within enterprise environments.
* Experience supporting audits, compliance activities, or security governance programs.
* Excellent communication and stakeholder management skills.
* Professional working proficiency in both English and Spanish Preferred Qualifications
* Security certifications such as CISSP, CISM, CISA, or equivalent (or currently pursuing certification).
* Knowledge of GDPR and EU data protection requirements.
* Understanding of SOC 1, SOC 2, SSAE/ISAE3402, and PCI-DSS frameworks.
* Basic knowledge of network and systems security technologies and practices. Personal Attributes We're looking for someone who:
* Thinks strategically and takes a proactive approach to problem-solving.
* Demonstrates sound judgement and attention to detail.
* Can communicate complex technical concepts to both technical and non-technical audiences.
* Thrives in a collaborative, international environment. xcskxlj
* Is comfortable working independently and managing multiple priorities.
* Is willing to travel occasionally (up to 10%).

📌 Business Information Risk Manager (Madrid)
🏢 Confidential
📍 Madrid