Deloitte is the world's largest professional services network, providing audit, consulting, financial advisory, risk advisory, tax, and legal services to many of the world's most prestigious brands. Operating as a global network of member firms, the company employs hundreds of thousands of professionals across more than 150 countries, serving as a dominant force in the global consulting and accounting industry.

In Spain, Deloitte maintains a massive presence with a network of offices spanning the entire country, including major hubs in Madrid and Barcelona. The firm is a significant recruiter of international talent, particularly within its technology, cybersecurity, and digital transformation divisions, where English is often the primary working language and multicultural teams are the norm.

Founded by William Welch Deloitte in London in 1845, the firm grew through a series of high-profile mergers, including the 1989 merger with Touche Ross and the 1993 renaming to Deloitte Touche Tohmatsu. It has transitioned from a traditional accounting firm into a global leader in digital and strategic consulting.

For international professionals

Deloitte Spain operates over 20 offices across the country, providing diverse geographic options for relocation beyond just Madrid and Barcelona.
The company is a major sponsor of work visas for highly skilled international profiles, particularly in specialized IT and financial roles.
They offer a structured 'International Mobility' framework that supports employees moving between global member firms.
Deloitte University EMEA provides extensive continuous learning and networking opportunities for professionals looking to advance their careers in Europe.
Many technical and consulting roles in their 'Global Delivery Centers' in Spain prioritize English proficiency over Spanish fluency.

T&T Cyber | Senior | Privacy Governance & Compliance

Deloitte

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

Can you imagine participating in the transformation of leading national and international organizations?
At Deloitte, we are committed to generating an impact on society, our clients, and you.
We are looking for a Senior professional to join our Privacy, Governance & Compliance team. As a team, our main objective is to establish leadership and evolution of the security function, facilitating the achievement of objectives set both internally by the entities and externally by regulators or competent authorities.

What is the challenge?

You will help companies create a reliable and secure digital environment by acting as a trusted advisor to those responsible for Technology (CIO/CTO), Information Security (CISO), and Risk (CRO).
You will help define the strategy and operating models to respond to technological and cybersecurity risks.
You will contribute to the digital transformation of companies by assessing and mitigating the cybersecurity risks arising from this transformation.
You will determine the level of maturity and trust in the company's IT environments, identifying IT risks (Security, Privacy, Continuity, Data, Technological Changes, Vendors).
You will define and manage the implementation of action plans for the management of identified IT risks.
You will analyze the use of emerging technologies (Robotics, Artificial Intelligence, Cloud) from the perspective of associated IT risks.
You will perform compliance assessments, provide technical advice, and oversee the correct implementation of regulations such as DORA, NIS2, GDPR, SWIFT CSP, LPIC, PCI-DSS, ENS, EBA and EIOPA guidelines, and other cybersecurity regulations.
You will align company practices with standards such as ISO 27001/2, ISO 22301, COBIT, NIST 2.0, and other reference frameworks.
You will perform reviews and modifications of policies and procedures to ensure regulatory compliance and alignment with best practices.
You will perform reviews and audits of security solutions and IT environments.
You will define and implement cybersecurity KPIs and KRIs and other IT risks.
You will generate and present risk dashboards and IT risk indicators to company executives for decision-making.
You will execute the role of external CISO, leading the protection of entities against cyberattacks.

How do we imagine you?

More than two years of experience in the sector.
High level of English.
Multidisciplinary profiles with a great capacity to adapt to new challenges.
A strong desire to learn and continue developing.

What is it like to work at Deloitte?
🤩 High-impact projects where you will have a long journey of learning
☯️ A hybrid-flexible daily routine: you will have flexible hours and a good balance between remote work and teamwork in our offices or those of our clients
⚽ Great atmosphere inside and outside the office: you will enjoy several teambuildings a year, cultural and sporting activities... and much more!
🧘♀️ Comprehensive well-being: take care of yourself with our physical, mental, and financial health program... and with a medical team in the offices!
🤲 Social impact: You can sign up for a wide range of national and international volunteer opportunities and pro-bono projects to put your time and talent at the service of those who need it most
🗣️ Culture of feedback and continuous learning: you will grow in an inclusive environment where equal opportunity and your personalized training plan will drive your development. Can you already visualize yourself at Deloitte University in Paris?
🤝 Exclusive benefits for being part of Deloitte: you can enjoy a large catalog of benefits and a comprehensive flexible remuneration plan

If you like what you read, these are your next steps:

Apply to the offer by clicking 'Submit application now' and complete your profile
If you fit the position, our talent team will contact you to get to know you better

Start the process! We will guide you through the different phases until your onboarding.

View original advert (Spanish)

¿Te imaginas participando en la transformación de las principales organizaciones nacionales e internacionales?
En Deloitte estamos comprometidos con generar un impacto en la sociedad, en nuestros clientes y en ti.
Buscamos una persona Senior para incorporarse a nuestro equipo de Privacy, Governance & Compliance, como equipo nuestro principal objetivo es establecer liderazgo y evolución de la función de seguridad, facilitando el cumplimiento de los objetivos establecidos tanto internamente por las entidades como externamente por parte de reguladores o autoridades competentes.

¿Cuál es el reto?

Ayudarás a las compañías a generar un entorno digital confiable y seguro siendo el asesor de confianza de los responsables de Tecnología (CIO/CTO), Seguridad de la información (CISO) y Riesgos (CRO).
Ayudarás a definir la estrategia y modelos operativos para dar respuesta a los riesgos tecnológicos y de ciberseguridad.
Contribuirás a la transformación digital de las compañías valorando y mitigando los riesgos de ciberseguridad que derivan de esta transformación.
Determinarás el nivel de madurez y confianza sobre entornos IT de la compañía, identificando riesgos IT (Seguridad, Privacidad, Continuidad, Datos, Cambios tecnológicos, Proveedores).
Definirás y gestionarás la implantación de planes de acción para la gestión de los riesgos IT identificados.
Analizarás el uso de tecnologías emergentes (Robotics, Inteligencia Artificial, Cloud) desde la perspectiva de los riesgos IT asociados.
Realizarás evaluaciones de cumplimiento, darás asesoramiento técnico y supervisarás la correcta implantación de normativas como DORA, NIS2, GDPR, SWIFT CSP, LPIC, PCI-DSS, ENS, guías de EBA y EIOPA y otras regulaciones de ciberseguridad.
Alinearás las prácticas de las empresas a estándares como la ISO 27001/2, la ISO 22301, COBIT, el NIST 2.0 y otros frameworks de referencia.
Realizarás revisiones y modificaciones de políticas y procedimientos para asegurar el cumplimiento normativo y la alineación con las mejores prácticas.
Realizarás revisiones y auditorías sobre soluciones de seguridad y entornos IT.
Definirás e implantarás KPIs y KRIs de ciberseguridad y otros riesgos IT.
Generarás y realizarás cuadros de mandos de los riesgos e indicadores de riesgo IT a los responsables de las empresas para la toma de decisiones.
Ejecutarás la función de CISO externo, liderando la protección de entidades frente a ciberataques.

¿Cómo te imaginamos?

Tener más de dos años de experiencia en el sector.
Nivel alto de inglés.
Perfiles multidisciplinares y con gran capacidad de adaptación a nuevos retos.
Muchas ganas de aprender y seguir desarrollándote.

¿Cómo es trabajar en Deloitte?
🤩 Proyectos de alto impacto donde tendrás un largo recorrido y aprendizaje
☯️ Un día a día híbrido-flexible: tendrás horario flexible y un buen equilibrio entre el teletrabajo y el trabajo en equipo en nuestras oficinas o las de nuestros clientes
⚽ Buen ambiente dentro y fuera de la oficina: disfrutarás de varios teambuildings al año, actividades culturales y deportivas... ¡y mucho más!
🧘♀️ Bienestar integral: cuídate con nuestro programa de salud física, mental y financiera... ¡y con equipo médico en las oficinas!
🤲 Impacto social: Podrás apuntarte a una gran cantidad de voluntariados de alcance nacional e internacional y a proyectos pro-bono con los que poner tu tiempo y talento al servicio de quienes más lo necesitan
🗣️Cultura del feedback y aprendizaje continuo: crecerás en un entorno inclusivo donde la igualdad de oportunidades y tu plan personalizado de formación impulsarán tu desarrollo. ¿Ya te visualizas en la Deloitte University de París?
🤝 Beneficios exclusivos por ser parte de Deloitte: podrás disfrutar de un gran catálogo de beneficios y de un completo plan de retribución flexible

Si te gusta lo que lees, estos son tus próximos pasos:

Aplica a la oferta haciendo clic en 'Enviar candidatura ahora' y completa tu perfil
Si encajas en el puesto, nuestro equipo de talento te contactará para conocerte mejor

¡Comienza el proceso! Te iremos guiando por las diferentes fases hasta tu incorporación.