Senior IT Risk Officer (Cybersecurity)

Location: Barcelona, Spain; remote role with frequent travel across Europe, approximately 35–50% of the time.

Company

hirify.global is an international life sciences company providing analytical testing and laboratory services across food, environmental, pharmaceutical, clinical, and other industries.

What you will do

• Plan and conduct IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT services.
• Assess technical and organizational controls covering network security, identity and access management, endpoint security, vulnerability management, cloud security, logging, monitoring, backup, and IT resilience.
• Identify technical weaknesses, evaluate their business impact, and challenge existing implementations and security controls when necessary.
• Translate technical findings into clear business risks and pragmatic recommendations.
• Prepare reports, present assessment results to technical teams and management, and follow up on remediation actions.
• Improve IT risk assessment methodologies and maintain relationships with IT, security, and business stakeholders.

Requirements

• 3–7 years of relevant experience in cybersecurity, information security, IT risk, IT audit, or a related technical IT control function.
• Experience performing IT risk assessments, security assessments, or technical IT audits.
• Strong technical understanding of networking, firewalls, Active Directory, Entra ID, IAM/MFA, endpoint security, vulnerability management, Windows/Linux infrastructure, cloud security, SIEM/logging, backup, and disaster recovery.
• Ability to understand technical architectures, identify realistic security risks, and communicate credibly with infrastructure and security engineers.
• Strong analytical, written, verbal communication, stakeholder management, and negotiation skills; English is required.
• University degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a relevant field, or equivalent professional experience; willingness to travel frequently across Europe is required.

Nice to have

• Knowledge of NIS2, EU data protection requirements, and common cybersecurity frameworks.
• Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001.

Culture & Benefits

• Career development support and opportunities to grow within the organization.
• International, decentralized network spanning more than 60 countries and over 950 laboratories.
• Commitment to diversity, equity, inclusion, and equal opportunity.
• Focus on sustainability and carbon-neutrality initiatives.