The English-language job board for Spain

IT Risk & Compliance Associate

On-site in Boadilla del Monte·Added 11 days ago

Getnet

15 open roles

Apply

Overview

Requirements

Have the right to work in Spain
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Work in English
English is required, per the ad.
Work on-site in Boadilla del Monte
No relocation package mentioned.
Have 5+ years of experience
Mid-level role.
University degree
“Bachelor's degree in Computer Engineering, Telecommunications, Mathematics, Physics, or related fields” — per the ad.

Requirements

What we're looking for

+5 years of experience in IT Risk, Cyber Risk or Technology Risk Management, preferably within financial services or regulated environments (payments industry is a plus)
Proven experience in second line of defence (risk oversight / control functions)

Nice to have

Knowledge of payments ecosystem, acquiring business and PSD2 is a strong plus
Strong knowledge of IT & Cyber Risk frameworks and standards (e.g. ISO 27001, NIST, COBIT)
Strong knowledge of Operational resilience and business continuity frameworks (i.e: DORA) and its implications on IT and Cyber risk management
Experience in:
Risk assessments (RCSA, control frameworks)
IT controls and cybersecurity practices
Cloud risk and technology environments
Familiarity with Third-party risk management with focus on IT, Cyber and resilience
Strong analytical and problem-solving skills, with the ability to translate technical risks into business impact
Ability to challenge stakeholders constructively and influence decision-making
Excellent communication skills (written and verbal), with experience interacting with senior stakeholders
High level of English

Education & certifications

Bachelor's degree in Computer Engineering, Telecommunications, Mathematics, Physics, or related fields
CISA, CRISC, CISSP, CISM or similar
ITIL or other IT governance certifications

The role

Risk & Compliance Associate - IT & Cyber Risk

What you'll do

As a Risk & Compliance Associate specialized in IT & Cyber Risk, you will play a key role in the identification, assessment, and oversight of technology and cybersecurity risks across our platforms, products, and services.

You will act as a second line of defense, providing independent challenge to IT/Cyber, ensuring alignment with internal policies and regulatory requirements.

We need someone like you to help us on the following fronts:

Identify, assess and monitor IT and Cyber risks across systems, platforms, and digital products
Perform independent risk oversight and challenge over IT, Cybersecurity
Contribute to the definition and evolution of the IT & Cyber Risk Management Framework, aligned with regulatory requirements (e.g. DORA)
Define and monitor Key Risk Indicators (KRIs) and support risk appetite frameworks
Assess risks related to cloud environments, infrastructure, and technology architecture
Evaluate and challenge controls design and effectiveness, ensuring proper risk mitigation
Support the identification and management of ICT third-party / vendor risks
Lead risk assessments (RCSA), control testing and risk reporting activities
Contribute to operational resilience initiatives. (identification of critical services, mapping of dependencies, testing, etc.)
Collaborate with internal stakeholders and local units to ensure consistent risk management practices across subsidiaries
Support internal and external audits and regulatory interactions when required

About Getnet

Getnet is a fintech company specializing in payment processing and merchant services, offering a range of solutions including card payment acceptance, digital payments, and value-added services for businesses. As a subsidiary of Banco Santander, Getnet operates across multiple countries in Latin America and Europe, providing payment technology and financial services to merchants of all sizes. The company is part of the broader financial services ecosystem, focusing on enabling seamless transactions and supporting the digital transformation of commerce.

In Spain, Getnet has established a significant presence with its office in Madrid, which serves as a hub for its operations in the region. The company is actively expanding its team in Spain, with roles spanning engineering, data, IT operations, and business functions, making it an attractive destination for international professionals looking to work in the fintech sector. Getnet's culture emphasizes innovation, digital transformation, and collaboration, and as part of the Santander group, it offers the stability of a large financial institution while maintaining the agility of a tech-focused company.

Industry: Fintech
Founded: 2017
Employees: 5,000–10,000
Headquarters: Madrid, Spain
In Spain: Madrid
Website: getnet.net

Good to know if you are moving

Getnet is a subsidiary of Banco Santander, one of the largest banks in the world, providing financial stability and global opportunities.
The company has a strong focus on digital transformation and innovation, offering roles in cutting-edge areas like AI, machine learning, and data architecture.
Working in Madrid offers a vibrant lifestyle and a growing tech ecosystem, with Getnet's office located in the heart of the city.
Getnet supports professional development and offers a multicultural environment, with teams across Europe and Latin America.
The company is expanding its Spain operations, creating new opportunities for international talent in fintech and technology.

All open roles at Getnet