This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Risk Management Specialist based in Spain.
Join a global security risk management function focused on strengthening how organisations identify, quantify, assess, and reduce cyber risk. In this role, you will help shape security risk standards, frameworks, and practices across a complex, technology-driven environment. You will combine established industry methodologies with emerging threat intelligence and innovative approaches to risk modelling. Your work will influence security decisions, engineering practices, learning initiatives, and organisational resilience. You will collaborate closely with security leadership and teams across the organisation to turn risk analysis into actionable business decisions. The role also offers opportunities to contribute to the wider open source security ecosystem through knowledge sharing, industry engagement, and thought leadership.
Accountabilities:
- Define and continuously improve security risk management standards, frameworks, playbooks, and operating practices.
- Analyse existing security risk processes and identify opportunities to improve their effectiveness, consistency, and scalability.
- Evaluate, select, and implement new security requirements, tools, methodologies, and risk management practices.
- Lead quantified security risk assessments and apply statistical approaches such as FAIR, sensitivity analysis, and other risk modelling techniques.
- Translate internal and external cybersecurity risk analyses into clear business terms and recommend appropriate courses of action.
- Develop key risk indicators, control indicators, and performance indicators to measure security programs and capabilities.
- Partner with security leadership to communicate risk insights, influence decisions, and drive organisational change.
- Develop templates, guidance, and self-service materials that enable teams to manage security risks effectively.
- Launch and support security assessment initiatives designed to identify and mitigate risks across the organisation.
- Monitor risk management activities and continuously identify opportunities to strengthen processes and outcomes.
- Contribute to security learning and development initiatives, including training materials, playbooks, and educational resources.
- Collaborate with engineering and security teams to promote Secure Development Lifecycle and Security by Design practices.
- Help grow security risk management thought leadership through industry engagement, presentations, knowledge sharing, and participation in relevant governance forums.
Requirements:
- Bachelor’s degree in Computer Science, STEM, or a related discipline, or a compelling alternative career and professional background.
- Strong academic track record combined with a demonstrated drive to achieve high standards.
- Professional experience in security risk management, security assessments, threat modelling, or a closely related field.
- Strong knowledge of security risk management frameworks and methodologies, including experience applying quantitative and qualitative risk analysis.
- Practical understanding of how to operationalise security risk management across technical and organisational environments.
- Experience with Secure Development Lifecycle and Security by Design methodologies.
- Strong technical understanding of cybersecurity assessments, risk analysis, and security controls.
- Experience interpreting complex security and risk information and translating it into practical business recommendations.
- Leadership and management capabilities, with the ability to influence stakeholders and drive improvements across teams.
- Excellent written and verbal business English, with strong presentation and communication skills.
- Strong analytical and problem-solving abilities, with a structured and detail-oriented approach to complex challenges.
- Personal motivation to work at the forefront of technology security and continuously develop knowledge of emerging practices and threats.
- A proactive mindset, demonstrated initiative, and a track record of exceeding expectations.
Benefits:
- Compensation tailored to geographical location, experience, and performance.
- Performance-driven annual bonus in addition to base compensation.
- Distributed, remote-first working environment.
- Twice-yearly in-person team sprints and opportunities to collaborate with colleagues around the world.
- USD 2,000 annual personal learning and development budget.
- Annual compensation review, with more frequent reviews for graduates and associates.
- Recognition and performance rewards.
- Annual holiday leave.
- Maternity and paternity leave.
- Employee Assistance Programme.
- Opportunities to travel internationally and meet colleagues in different locations.
- Priority Pass and travel upgrades for long-haul company events.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
