Exposure Management Data Analyst 100% (f/m/d)

Location: Madrid, Spain

Company

hirify.global is a wealth management bank developing security exposure reporting within its Security Compliance Competence Centre.

What you will do

• Own, maintain, and extend dashboards and reports covering penetration testing, infrastructure vulnerabilities, and security configuration baseline compliance.
• Design, document, and version formulas for security exposure measures, ensuring consistent definitions, calculations, and ownership.
• Build and maintain searches and data transformations that aggregate per-asset security results at scale, including coverage checks for reporting continuity.
• Define and implement measures for newly managed exposure domains where no established metrics exist.
• Design, validate, and support adoption of an aggregated per-service exposure score for proportionate, risk-based governance.
• Replace manual supervisory-request responses with standardized, reusable, reproducible reporting mapped to underlying data.

Requirements

• Hands-on expertise with an enterprise business intelligence platform, preferably Tableau, including data modelling, calculated fields, level-of-detail expressions, extract strategy, and performance tuning.
• Proven ability to design and document metrics and composite scores, including weighting, missing-data treatment, sensitivity, and validation.
• Experience defining a measure from scratch in a domain without an established metric and getting it accepted by the measured stakeholders.
• Scripting experience for data transformation and automation, ideally in Python, with maintainable, documented, version-controlled work.
• Bachelor's degree in computer science, data engineering, information security, or equivalent practical experience.
• Five or more years of experience in data analytics or data engineering, including direct responsibility for reporting used by others.
• Fluency in English.

Culture & Benefits

• Work within the Security Compliance Competence Centre in Madrid.
• Collaborate with stakeholders across delivery and governance functions.
• Contribute to a globally governed security function operating under increasing regulatory scrutiny.