OverviewIn this role you will drive the Cyber Transformation Plan within a global financial services setting, ensuring alignment with cybersecurity policies, regulatory requirements, and risk management.
You will partner with local and global stakeholders to strengthen governance, risk, and compliance oversight while promoting best practices.
The position offers the opportunity to influence security posture across multiple entities and geographies through standardized processes and continuous improvement.
You will work on high-impact risk indicators, budgets, and regulatory controls to support secure business growth.
ResponsabilidadesReport GRC status to Corporate Security Functions and Second Line of Defense
Supervise cybersecurity plans and assist budget monitoring and optimization
Monitor compliance with cybersecurity policies, standards, and internal controls
Define and track KRIs, ToH maps, and cybersecurity performance metrics
Manage Cyber Risk Lifecycle including identification, assessment, mitigation and reporting
Coordinate local Cybersecurity Director Plans with general strategies
Assess governance practices and propose improvements to strengthen security posture
Promote standardization and optimization of cybersecurity services across countries
Share best practices and ensure alignment with stakeholders




Ensure effective implementation of cybersecurity regulations, procedures and standards
Requisitos principalesMinimum 4 years in Cybersecurity GRC, IT Risk Management, Information Security, Audit or related fields
Experience in regulated environments
Experience coordinating governance activities across multiple stakeholders or geographies
Advanced English; Spanish proficiency preferred
Strong understanding of cyber threats, vulnerabilities, and control deficiencies
Knowledge of GRC frameworks (risk assessments, KRIs, RCSA, cyber metrics)
Experience with audits, remediation, and recommendations (preferred)
Understanding of budgeting concepts (CAPEX/OPEX) and vendor management (preferred)
Knowledge of Business Continuity and resilience frameworks (preferred)
Professional certifications such as CISSP, CISM, CISA, CEH, CSX or equivalent (preferred)
Experience collaborating with local and global cybersecurity functions in multi-country organizations (preferred)
Strong analytical and risk-based thinking
Excellent stakeholder management and communication
Governance and compliance mindset
Cybersecurity GRC frameworks (risk assessments, KRIs, RCSA, cyber metrics)
Knowledge of cybersecurity regulations and controls for financial institutions
Cyber risk lifecycle management

📌 Senior Cyber Grc Specialist (Boadilla del Monte)
🏢 Grupo Santander
📍 Boadilla del Monte