The English-language job board for Spain

Senior Governance, Risk and Compliance Analyst

On-site in Madrid·Added 2 days ago

Arup

28 open roles

Apply

Overview

Requirements

Have the right to work in Spain
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Work in English
English is required, per the ad.
Work on-site in Madrid
No relocation package mentioned.

Pay & benefits

What you'll get

At Arup, we care about each member's success, so we can grow together.

Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair and equitable pay, we offer a career in which all of our members can belong, grow and thrive - through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.

We are owned in trust on behalf of our members, giving us the freedom, with personal responsibility, to set our own direction and choose work that aligns with our purpose and adds to Arup's legacy. Our members collaborate on ambitious projects to deliver remarkable outcomes for our clients and communities. Profit Share is a key part of our reward, enabling members to share in the results of our collective efforts.
We care about you and want you to perform at your best, which is why we offer one of the most competitive benefits packages in our sector.
As a member organisation, everyone shares in our success through a global profit share scheme (payments are dependent on the firm's financial performance).

Requirements

What we're looking for

Demonstrate strong skills in IT DR and ISO22301 compliance within a global digital technology environment.
Have a solid understanding of assessing and enhancing BIA, application dependencies, and engaging key stakeholders in IT DR activities.
Bring experience in threat and risk assessment.
Show enthusiasm for cyber awareness and education, with a desire to lead global initiatives that encourage cultural change.
Value ongoing learning and is motivated to develop further in a supportive, international, and innovative organisation.

The role

Arup's purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.

Digital Technology's Cyber GRC (Governance, Risk, and Compliance) team is responsible for ensuring that Arup's cybersecurity practices align with internal policies, industry standards, and regulatory requirements. The team manages cyber risks by developing governance frameworks, assessing threats, implementing controls, monitoring compliance, and supporting audits. Our goal is to reduce security risks while enabling business objectives in a secure and compliant manner

Watch this short clip to discover how Arup are shaping a better world and how you could be a part of it!

At Arup, you belong to an extraordinary collective - in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas. You will have the opportunity do socially useful work that has meaning - to Arup, to your career, to our members and to the clients and communities we serve.

Did you know: Our Digital Technology team are proud prior winners of the IT Team of the Year at the Chartered Institute of IT's UK IT Industry Awards.

What you'll do

Develop, maintain, and test the organisation's IT Disaster Recovery (ITDR) plans
Conduct regular risk assessments and impact analyses to identify critical systems, dependencies, and recovery priorities.
Manage global cybersecurity awareness campaigns and training initiatives to strengthen security culture.
Collaborate with regional digital teams to embed security-by-design principles into projects and products.
Drive implementation and ongoing compliance with ISO 22301 standards, ensuring the organisation meets global BCM requirements.

Is this role right for you?

Not ready to apply just yet, or have a few questions? Please email Kat.Falepau@arup.com

Hiring process

To understand what to expect next, please visit our Careers page Our aim is to make this process as streamlined and easy as possible for our applicants. If you feel there are some improvements needed in our process, please feel free to reach out to Kat Falepau.

Stay safe online - Arup will never ask for payment or your bank details as part of our recruitment process.

About Arup

Arup is a global consultancy providing extensive technical and advisory expertise across the built environment, drawing on more than 150 disciplines to shape infrastructure, buildings, energy and sustainability. Its work spans markets such as rail and high-speed transport, structural and civil engineering, building services, planning, and advisory services, with projects ranging from the Transpennine Route Upgrade to Little Island in New York City.

For international professionals, Arup presents itself as a borderless organisation: its careers portal organises vacancies by region (Americas, Asia Pacific, Europe and UKIMEA) with current listings across countries including the UK, Ireland, Germany, Denmark, Canada, Australia, Hong Kong, Indonesia and Malaysia, and employees describe global project opportunities across offices. The corporate website is published in English, German, French and Spanish, and Arup's Spain-relevant track record includes being approached in 2014 by the Sagrada Família Foundation to help complete the remaining structural design of La Sagrada Família in Barcelona. The available first-party sources do not confirm specific Spanish office locations, so candidates should verify current Spain-based openings directly via jobs.arup.com.

Industry: Engineering Consultancy
Website: arup.com

Good to know if you are moving

Arup recruits across four regions — Americas, Asia Pacific, Europe and UKIMEA — with current listings on its careers portal spanning countries including the UK, Ireland, Germany, Denmark, Canada, Australia, Hong Kong, Indonesia and Malaysia.
Arup's corporate website is published in English, German, French and Spanish.
Arup warns applicants about recruitment fraud: the Arup name has been used in recruitment scams, and candidates should never provide personal or financial information or send money to suspected fraudsters.
Career paths at Arup are flexible: 'There are plenty of defined career paths at Arup, but there's also a choose your own adventure path' — one engineer joined as a facade engineer and became a resilience leader.

In their own words

Additional information

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. We welcome applications from individuals of all backgrounds, regardless of age (within legal limits), gender identity or expression, marital status, disability, neurotype or mental health, race or ethnicity, faith or belief, sexual orientation, socioeconomic background, and whether you're pregnant or on family leave. We are an open environment that embraces diverse experiences, perspectives, and ideas - this drives our excellence.

Guided by our values and alignment with the UN Sustainable Development Goals, we create and contribute to equitable spaces and systems, while cultivating a sense of belonging for all. Our internal employee networks support our inclusive culture: from race, ethnicity and cross-cultural working to gender equity and LGBTQ+ and disability inclusion - we aim to create a space for you to express yourself and make a positive difference. Discover more about life at Arup at Careers - Your Life at Arup.

We are committed to making our recruitment process and workplaces accessible to all candidates. Please email Kat.Falepau@arup.com to let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and/or to perform the essential functions of the role. We will do everything we can to support you.

All open roles at Arup