The English-language job board for Spain
90,000+ live jobsSecurity Assurance and Cybersecurity Consultant
Hybrid in Pozuelo de Alarcón·Full-time·Added yesterday (last checked 6 Nov)
Our summary
- Work mode
- Hybrid, Pozuelo de Alarcón
- Contract
- Permanent, full-time hours
- English
- Required



Visa options
The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Skills
This job advert was originally written in Spanish.
Requirements
What we're looking for
Experience in the management, definition, and evaluation of cybersecurity controls.
Experience in Security Assurance, Governance, Risk, or Security Compliance areas.
Knowledge of regulatory frameworks and security standards such as NIST, ISO 27001, CIS Controls, PCI DSS, and DORA.
Experience in the definition and review of applicability matrices, evidence, control points, and acceptance criteria.
Experience in security audits and the follow-up of findings and action plans.
Experience in the drafting and maintenance of security policies, procedures, and standards.
Ability to communicate with technical and business teams, especially with Cyber, Technology, Risk, and Governance areas.
English level suitable for working in an international environment. (B2/C1)
Nice to have
Previous experience in the banking or financial sector.
Experience in international organizations and complex corporate environments.
Participation in projects involving the implementation or evolution of Security Assurance models.
Knowledge of regulatory requirements and control frameworks applicable to the financial sector.
Ability to coordinate with different teams and manage stakeholders at various levels.
The role
At Excelia, we are looking for a Security Assurance and Cybersecurity Governance Consultant, with experience in managing and evaluating cybersecurity controls, to participate in security assurance, governance, and compliance projects for one of our clients in the banking sector.
We are looking for a profile with experience in Security Assurance, Governance, Risk, or Security Compliance, who combines knowledge of regulatory frameworks and cybersecurity controls with analytical, auditing, and stakeholder management skills across different teams.
What you'll do
Participate in the definition and implementation of the Security Assurance model, identifying applicable cybersecurity controls and associated security requirements.
Define and review applicability matrices, control points, necessary evidence, and acceptance criteria to validate control compliance.
Manage and evaluate cybersecurity controls, verifying their correct implementation and effectiveness.
Provide support in security audits, reviewing evidence and following up on findings, deviations, and action plans.
Collaborate in regulatory governance and security compliance activities.
Draft, review, and maintain security policies, procedures, standards, and internal regulations.
Identify opportunities for improvement in controls and propose corrective actions.
Collaborate with Cyber, Technology, Risk, and Governance teams, acting as an interlocutor between the different areas.
Prepare documentation, reports, and deliverables related to the monitoring and assurance of security controls.
Additional information
📍 Work modality: Hybrid, with 1 or 2 days of on-site presence per week. (Madrid, Las Tablas)
⭐ What do we value?
Do you have experience in Security Assurance, Governance, and cybersecurity control evaluation and are you interested in participating in projects within the banking sector?
We want to get to know you! Join Excelia!
About Excelia
Excelia is a Canadian IT services and consulting company headquartered in Montreal, specializing in cybersecurity, cloud solutions, data analytics, and enterprise software implementation. The company operates across multiple countries, offering services such as managed IT support, security consulting, and implementation of platforms like Microsoft Dynamics 365 and Azure. With a workforce of several hundred employees, Excelia serves clients in various industries, focusing on digital transformation and IT security.
In Spain, Excelia has established a significant presence with offices in Madrid, Barcelona, and Bilbao, and is actively hiring for over 50 roles in cybersecurity, cloud architecture, software development, and data engineering. The company's work culture emphasizes technical expertise and professional growth, making it an attractive option for international professionals with skills in Microsoft technologies, cybersecurity, and data. Excelia offers opportunities for both junior and senior roles, including internships, and supports relocation for qualified candidates.
- Founded
- 1998
- Employees
- 500–1,000
- Headquarters
- Toronto, Canada
- In Spain
- Madrid, Barcelona, Bilbao
Good to know if you are moving
- Excelia has offices in Madrid, Barcelona, and Bilbao, offering multiple locations for international hires in Spain.
- The company is actively hiring for over 50 roles in Spain, including junior and senior positions, indicating a strong demand for tech talent.
- Excelia provides opportunities for internships and junior roles, which can be a good entry point for international professionals starting their careers in Spain.
- The company works with major technologies like Microsoft Dynamics 365, Azure, AWS, and cybersecurity tools, which are valuable skills for the Spanish tech market.
- Excelia's global presence may offer opportunities for cross-border projects and career mobility.
More jobs like this
or browse Security·Mid-level·Hybrid·Cybersecurity
