Details of the role and how it fits into the team

We would like to include in our IT Risk and Control team a person with sufficient technical skills and knowledge, as well as a clear understanding of information security and IT control areas to act as the focal point for IT security matters of his/her applications.

The position to cover is mid-experienced TISO role that implies direct interaction and relationship with different stakeholders like IT Application Owners (ITAOs) and application teams, Risk Type Controllers (RTCs) and other Second Line of Defense (2LoD) and Risk Teams (ERT, DCRO, etc.).

Your key responsibilities

• Ensure compliance of your applications as described in the Bank Information Security Policy and standards, as well as in the coverage of standard information security controls.
• Perform information security risk assessments and compliance evaluations for your applications.
• Assist ITAOs on the coverage and implementation of security controls and compensating measures in your applications for identified information security risks.
• Regularly monitor the compliance status of your applications as well as the implementation status of remediation and compensating measures.
• When required, support ITAOs with the Risk Management and Risk Acceptance processes as described in the Bank policies, as well as with audit (internal and external) and regulatory requirements regarding the information security aspects of your applications.

Your skills and experiences

• Background ranging different technologies used by the Bank in Spain mainly mainframe and DB2 for backend systems and Oracle and Java for midrange applications.
• Knowledge on different the different aspects of Information Security and IT Controls, like Identity and access, cryptographic standards, security logging and monitoring, security in application development and support processes, etc.
• Knowledge on the usage of desktop applications (e.g., MS Office suite).
• Advanced soft skills are desirable for dealing with different stakeholders and other teams.
• Language skills: fluent in English and Spanish.

What we will offer you

• Integration in the ITRC Spanish team as a mid-experienced Technical Information Security Officer (TISO) with direct contact with different stakeholders locally in Spain and also in Central Teams.
• Possibilities of growth and learning in other different technologies, frameworks and tools.

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.