We are an international technology services company founded in 1983 and currently have over 2,000 employees in 5 countries: France, Spain, Romania, Portugal, and Luxembourg.

What are we looking for?

We are seeking a Cybersecurity and IT Risk engineer, to provide cybersecurity services in English to the Central IT Risk Team through a new service focused on the pre-evaluation of cybersecurity control evidence based on the NIST Cybersecurity Framework.

Main Responsibilities

•Conduct and coordinate meetings with stakeholders from all entities, acting as an intermediary expert between entities and Central experts.

•Conduct and coordinate meetings with stakeholders across different countries.

•Evaluate the cybersecurity maturity demonstrated by the evidence provided for each NIST program control and define action plans based on the assessment.

•Evaluate residual risk and the level of compliance.

•Propose technical or functional corrective actions to mitigate identified risks.

•Report assessment results to the Central team for final validation of each entity’s maturity status.

•Deliver an assessment opinion on the completeness and compliance level of the evidence provided to demonstrate each entity’s cybersecurity framework maturity.

Requirements

•Ability to use data analytics to assess risks,



scope audits and test controls.

•Basic proficiency in the MS Office package (nice to have).

•Basic knowledge of ServiceNow (nice to have).

•Knowledge of Power BI (nice to have).

•Mandatory: knowledge of standards and regulatory frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001, and DORA, as well as best practices.

•Certifications such as CISM, CISA, ISO 27001 Lead Implementer or Lead Auditor, or CISSP (nice to have).

•Understanding of information security and cyber risks in the banking sector (nice to have).

•Mandatory: proven experience in cybersecurity auditing or governance, risks and controls, including experience in defining action plans.

Working Model

Hybrid.

Versátil hours from Monday to Friday.

We offer

? Continuous training

? Salary: 50.000 - 55.000€

? Career plan tailored to employee preferences

? Progression within the company

? Flexible working hours

? Hybrid work model

? Language training (English, French, Spanish).

Would you like to join our team?

If you have experience in vulnerability management and cybersecurity, and if you want to grow technically and professionally, don't hesitate to apply for this offer. Contact us!

📌 Cybersecurity and IT Risk Engineer (Madrid)
🏢 HN Services España
📍 Madrid