Technological Risk and Security Specialist

We are one of the world's most important insurers, made up of positive, dynamic, and committed people who make things happen. We believe that our diversity adds value to our teams, our culture, and our customers. We know that the best ideas and solutions arise in inclusive environments where we all feel seen, heard, and valued so that we can develop our full talent.

We have been recognized as one of the best places to work in Spain by the Forbes list and the Actualidad Económica ranking, and we have the best value proposition for all of us who are part of Aegon:

Would you like to help people live their best life? That is what we do every day. We achieve this because we are a company of people who care for people, with curiosity, connected to the reality around us, and focused on leaving the world better than we found it. We always learn from our customers and from each other.

We hope it excites you as much as it excites us!

An opportunity to drive technology risk management and security in an environment of digital transformation, artificial intelligence, and increasing regulatory demands.

• You will lead the oversight and evolution of the technology risk management framework (ITRM).
• You will assess ICT risks associated with applications, critical processes, new projects, and significant technological changes.
• You will continuously monitor technology risks and the effectiveness of implemented controls.
• You will participate in preparing reports and analyses that provide a comprehensive view of the company's technology risk.
• You will oversee risks related to access management, third-party access, and segregation of duties (SoD) from a second line of defense perspective.
• You will collaborate with IT, Security, and Business to strengthen controls and promote a preventive approach to risk management.
• You will contribute to defining and evolving the governance model for technology risks, security, and access.
• You will participate in managing and overseeing third-party technology risk (TPRM), incorporating applicable regulatory requirements, especially DORA.
• You will be part of initiatives related to artificial intelligence, identifying and assessing emerging risks and contributing to the development of control frameworks.
• You will analyze and assess technology risk acceptance requests, ensuring their alignment with the organization's risk appetite.
• You will work cross-functionally with different areas to integrate risk management into business processes and decisions.

We are looking for an analytical, proactive person with a solid understanding of technology risks, capable of combining risk oversight vision, technical knowledge, and the ability to collaborate with different areas of the organization.

• University degree in Computer Engineering, Telecommunications, Information Security, or related disciplines.
• Experience in technology risks, cybersecurity, or IT environments.
• Knowledge of technology risk management (IT Risk Management / ITRM).
• Experience or knowledge in information security, technology controls, and risk governance.
• Familiarity with regulatory frameworks and standards, especially DORA.
• Knowledge of access management and segregation of duties (SoD).
• Experience in third-party risk management (TPRM) will be valued.
• Interest in artificial intelligence and the risks associated with its adoption.
• Ability to work cross-functionally with IT, Security, Risk, and Business teams.
• Analytical skills, critical thinking, and a focus on continuous improvement.
• Communication and influencing skills to interact with different stakeholders.
• Advanced level of English, both oral and written.

Guerrero Pilar, Ana