We are an international technology services company founded in 1983 and currently have over 2,000 employees in 5 countries: France, Spain, Romania, Portugal, and Luxembourg.

What are we looking for?

We are seeking a Cybersecurity and IT Risk engineer, who conducts Third-Party Audits and risk assessments of external service providers, leading interviews with key stakeholders, reviewing supporting evidence, evaluating cybersecurity controls and operational controls, identifying key risks, and contributing to the effective management of third-party risk and regulatory compliance..

Main Responsibilities

•Conduct and coordinate meetings with stakeholders from different entities (customers).

•Conduct and coordinate meetings with third-party stakeholders (auditees).

•Lead interviews with customers and third-party representatives as part of audit and assessment activities.

•Evaluate the cybersecurity and risk management maturity of third-party providers delivering services to the entities.

•Review and analyze supporting evidence provided by third parties to validate responses to security and risk control.

•Prepare audit reports, consolidate key risks and observations, and present findings and recommendations to customers and management.

Requirements

–Proactive, autonomous, and results-oriented professional with a strong sense of ownership and accountability.

–Excellent communication and stakeholder management skills, capable of building effective relationships with internal and external parties at different organizational levels.

–Customer and service-oriented mindset,



focused on delivering high-quality outcomes and ensuring stakeholder satisfaction.

–Strong analytical, critical-thinking, and problem-solving abilities, with the capacity to assess complex situations and develop practical, risk-based solutions.

–Well-organized and structured approach to work, with strong planning, prioritization, and coordination skills.

–Ability to adapt quickly to changing priorities and operate effectively in dynamic and multicultural environments.

–Collaborative team player with the ability to work independently when required.

–Continuous learning mindset, demonstrating curiosity and commitment to professional development.

–Data-driven approach, leveraging analysis and insights to assess risks, support audit activities, and evaluate control effectiveness.

–Comfortable managing multiple activities simultaneously while maintaining attention to detail and quality standards.

–Willingness to travel for on-site audit assignments as required.

–Knowledge of industry standards and frameworks such as ISO 27001 and ISO 27005.

–Professional certifications such as CISA, CISM, CRISC, ISO 27001 Lead Auditor, or equivalent (nice to have).

Working Model

Hybrid.

Versátil hours from Monday to Friday.

We offer

? Continuous training

? Salary: 40.000 - 50.000€

? Career plan tailored to employee preferences

? Progression within the company

? Flexible working hours

? Hybrid work model

? Language training (English, French, Spanish).

Would you like to join our team?

If you have experience in vulnerability management and cybersecurity, and if you want to grow technically and professionally, don't hesitate to apply for this offer. Contact us!

📌 Third Party Risk Auditor (Madrid)
🏢 HN Services España
📍 Madrid