Senior Cyber GRC Specialist - SCFGS (Cybersecurity)

Location: Boadilla del Monte, Spain, with the role based out of Madrid

Company

hirify.global Consumer Finance Global Services supports cybersecurity transformation and governance across an international financial-services organization.

What you will do

• Support implementation and oversight of the Cyber Transformation Plan across the organization.
• Report cybersecurity governance, risk, and compliance status to corporate security and Second Line of Defense stakeholders.
• Monitor cybersecurity policies, standards, regulatory requirements, internal controls, budgets, and performance metrics.
• Define and track Key Risk Indicators, Technology Health maps, and cybersecurity metrics.
• Manage the cyber risk lifecycle, including risk identification, assessment, mitigation, and reporting.
• Coordinate local Cybersecurity Director Plans and drive standardization, best-practice sharing, and continuous improvement across countries.

Requirements

• At least four years of experience in cybersecurity GRC, IT risk management, information security, audit, or a related discipline.
• Experience working in regulated environments and coordinating governance activities across stakeholders, business units, or geographies.
• Strong knowledge of cybersecurity threats, vulnerabilities, attack vectors, security control deficiencies, risk assessments, KRIs, RCSA, and cyber metrics.
• Knowledge of cybersecurity regulations, policies, standards, control environments, audits, remediation plans, budgeting, and third-party risk.
• English at minimum B2 level is required; C1 is preferred.
• Professional certifications such as CISSP, CISM, CISA, CEH, or CSX are preferred.

Nice to have

• Spanish professional working proficiency.
• Knowledge of business continuity, information security governance, and resilience frameworks.
• Experience collaborating with local information protection teams and global cybersecurity functions.

Culture & Benefits

• Work in an international, matrixed environment with local and global stakeholders.
• Collaborative culture focused on innovation, continuous improvement, and sharing best practices.
• Opportunity to contribute to cybersecurity transformation and governance across multiple countries.