ENS / GRC Cybersecurity Consultant (Technical Profile) Specialist in Governance, Risk, and Compliance (GRC) and cybersecurity with experience in adaptation, implementation, and certification projects for the National Security Scheme (ENS) in public administration and public sector entities. A profile with both regulatory and technical knowledge, capable of acting as a bridge between security, infrastructure, architecture, and business areas. Key responsibilities - Execution of ENS adaptation projects (Basic, Medium, and High categories), including GAP analysis, adaptation plans, and monitoring of measures. - Development and maintenance of risk analyses using the MAGERIT methodology and PILAR tool. - Definition and review of security policies, procedures, standards, and instructions aligned with ENS, ISO 27001, and cybersecurity best practices. - Identification, design, and validation of technical and organizational security measures for infrastructures, systems, and services. - Coordination of ENS compliance audits, management of findings, and definition of remediation plans. - Preparation of security documentation, asset inventories, statements of applicability, and compliance evidence. - Monitoring of risks, non-conformities, and action plans, ensuring traceability until closure. - Preparation of executive reports and dashboards for security managers and senior leadership. - Liaison with technical teams, suppliers, service owners, and public bodies. Knowledge and experience - Demonstrable experience in ENS adaptation and certification projects in Public Administrations or entities subject to ENS. - Solid knowledge of MAGERIT, risk analysis and management, and use of PILAR. - Knowledge of security regulations and standards: ENS, ISO/IEC 27001, ISO/IEC 27002, NIST CSF, and GDPR. - Ability to translate regulatory requirements into technical controls and implementable security measures. - Technical knowledge in system architecture, networks, cloud infrastructure, identity management, endpoint protection, and security monitoring. - Experience collaborating with infrastructure, operations, development, and architecture teams. - Strong technical writing skills and ability to produce compliance documentation. - English level B1 or higher. Required experience - Between 2 and 6 years of experience in cybersecurity, risk management, or regulatory compliance. - Participation in at least 2-3 ENS adaptation or audit projects. - Previous experience in public bodies, local entities, regional administrations, or service providers for Public Administration. Desirable: Certifications such as CISA, ISO 27001 Lead Implementer/Auditor, ENS, CCSK, Security+, as well as experience with NIS2, DORA, or business continuity.

.

About Accenture

Accenture is a leading global professional services company that helps the world's leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services-creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world's leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us atwww.accenture.com

Equal Opportunity Employment Statement

We believe that no one should be discriminated against because of their differences. All employment decisions will be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis protected by applicable law. Our rich diversity makes us more innovative, competitive and creative, which helps us better serve our clients and communities.

Consultor ENS / Ciberseguridad GRC (Perfil Técnico) Profesional especializado en Gobierno, Riesgo y Cumplimiento (GRC) y ciberseguridad con experiencia en proyectos de adecuación, implantación y certificación del Esquema Nacional de Seguridad (ENS) en entornos de Administración Pública y entidades del sector público. Perfil con conocimientos tanto normativos como técnicos, capaz de actuar como nexo entre áreas de seguridad, infraestructura, arquitectura y negocio. Funciones principales Realización de proyectos de adecuación al ENS (categorías Básica, Media y Alta), incluyendo análisis GAP, planes de adecuación y seguimiento de medidas. Elaboración y mantenimiento de análisis de riesgos mediante metodología MAGERIT y herramienta PILAR. Definición y revisión de políticas, procedimientos, normas e instrucciones de seguridad alineadas con ENS, ISO 27001 y buenas prácticas de ciberseguridad. Identificación, diseño y validación de medidas técnicas y organizativas de seguridad sobre infraestructuras, sistemas y servicios. Coordinación de auditorías de cumplimiento ENS, gestión de hallazgos y definición de planes de remediación. Elaboración de documentación de seguridad, inventarios de activos, declaraciones de aplicabilidad y evidencias de cumplimiento. Seguimiento de riesgos, no conformidades y planes de acción, asegurando su trazabilidad hasta el cierre. Elaboración de informes ejecutivos y cuadros de mando para responsables de seguridad y dirección. Interlocución con equipos técnicos, proveedores, responsables de servicio y organismos públicos. Conocimientos y experiencia Experiencia demostrable en proyectos de adecuación y certificación ENS en Administraciones Públicas o entidades sujetas al ENS. Conocimiento sólido de MAGERIT, análisis y gestión de riesgos, y uso de PILAR. Conocimiento de normativa y estándares de seguridad: ENS, ISO/IEC 27001, ISO/IEC 27002, NIST CSF y RGPD. Capacidad para traducir requisitos normativos en controles técnicos y medidas de seguridad implantables. Conocimientos técnicos en arquitectura de sistemas, redes, infraestructura cloud, gestión de identidades, protección de endpoints y monitorización de seguridad. Experiencia colaborando con equipos de infraestructura, operaciones, desarrollo y arquitectura. Capacidad de redacción técnica y elaboración de documentación de cumplimiento. Nivel de inglés B1 o superior. Experiencia requerida Entre 2 y 6 años de experiencia en ciberseguridad, gestión de riesgos o cumplimiento normativo. Participación en al menos 2-3 proyectos de adecuación o auditoría ENS. Experiencia previa en organismos públicos, entidades locales, administraciones autonómicas o proveedores de servicios para la Administración Pública. Valorable: Certificaciones como CISA, ISO 27001 Lead Implementer/Auditor, ENS, CCSK, Security+, así como experiencia en NIS2, DORA o continuidad de negocio.

.

About Accenture

Accenture is a leading global professional services company that helps the world's leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services-creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world's leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us atwww.accenture.com

Declaración de igualdad de oportunidades en el empleo

Creemos que nadie debe ser discriminado por sus diferencias. Todas las decisiones de empleo se tomarán sin importar la edad, raza, credo, color, religión, sexo, origen nacional, ascendencia, discapacidad, condición de veterano militar, orientación sexual, identidad o expresión de género, información genética, estado civil, ciudadanía ni ningún otro criterio protegido por la legislación aplicable. Nuestra rica diversidad nos hace más innovadores, competitivos y creativos, lo que nos ayuda a servir mejor a nuestros clientes y comunidades.