🇬🇧
The English-language job board for Spain
92,000+ live jobsRisk and Compliance Specialist
On-site in Madrid·Added yesterday (last checked 28 Oct)
Our summary
Visa options
The ad doesn’t mention sponsorship
Not a refusal, but not a yes. Worth asking in your first message.
Skills
This job advert was originally written in Spanish.
Requirements
Nice to have
Certifications related to risk, audit, governance, and information security such as the following will be valued:
- CISA
- CISM
- CGEIT
- ISO 27001 Lead Auditor
- Other certifications related to risk, audit, data protection, or IT governance.
Education & certifications
- University degree in Computer Engineering, Telecommunications, or similar.
- Postgraduate studies or a Master's degree in Data Protection, Cybersecurity, Risk, or related fields will be valued.
Pay & benefits
What you'll get
- You will join an international company that is a leader in the energy sector.
- You will enjoy a competitive salary, social benefits, and work-life balance measures.
- You will work with highly qualified teams in a global and multidisciplinary environment.
- You will participate in projects related to risk, cybersecurity, data protection, and compliance, interacting with different businesses and corporate areas.
- You will have a welcome program and opportunities for continuous training and development.
The role
Would you like to play a key role in managing technological risks and compliance in a global company?
If you have experience in IT risks and controls, data protection and compliance, and you are motivated to work across different areas and international teams, we want to meet you!
What you'll do
- Participate in the identification, analysis, evaluation, and management of technological and cybersecurity risks.
- Define and supervise IT controls, seeking their effectiveness and alignment with corporate regulations and models.
- Ensure compliance with data protection and privacy regulations, including GDPR and associated regulations.
- Participate in the definition and evolution of the IT risk and compliance framework, integrating best practices and reference standards.
- Work with risk and compliance management tools, especially Archer GRC.
- Design and monitor processes, performance metrics, and dashboards.
- Participate in the definition of controls related to infrastructure, cloud environments, security tools, and development.
- Coordinate with teams from different businesses and corporate areas, such as Cybersecurity and Internal Audit.
- Work in an international environment, collaborating with teams in Spain, the United Kingdom, the United States, Brazil, Mexico, and other countries.
Technical knowledge
We are looking for a profile with solid experience and knowledge in:
- Analysis and management of IT risks and controls.
- Standards and methodologies such as ISO 27001/2700x, NIST CSF, NIST 800, or C2M2.
- Data protection and privacy: GDPR, LOPD, and related regulations.
- IT service governance and management frameworks such as ITIL and COBIT.
- Methodologies and ways of working such as Agile, Scrum, or DevOps.
- Quality standards and models such as ISO 9001 or CMMI.
- Infrastructure technologies, cloud, security tools, and development, for the definition of controls.
- IT risk and compliance management systems and tools.
- Advanced experience with Archer GRC.
- Project management and software development life cycle, SDLC.
- Design of processes, metrics, dashboards, and process management tools such as QPR.
Required experience
- At least 7 years of experience in positions related to technological risk, compliance, IT audit, data protection, or equivalent functions.
- Experience working with international and multidisciplinary teams.
- Ability to operate in complex organizations and coordinate with different businesses and corporate areas.
- Good communication, coordination, and adaptability to change skills.
Publication end date
09-11-2026
Hiring process
3 steps3 interviews
Contact from the People team
Preliminary interview
With People team
Assesses professional skills, motivation for Iberdrola and fit with the position.
Technical interview
Confirms you meet the technical requirements of the position and fit the team's culture.
Professional-managerial interview
Not every role
Held depending on the level of the position.
Finalist notification and offer · With manager or local People team
- The People and Organisation department supervises every selection process.
About Iberdrola
Iberdrola is a global energy and utilities company headquartered in Bilbao, Spain. It is one of the world's largest electricity utilities by market capitalization and a leading producer of wind power, with operations spanning Europe, the Americas, and Asia. The company focuses on renewable energy, smart grids, and sustainable electrification, serving millions of customers worldwide.
In Spain, Iberdrola is a dominant player in the energy sector, with extensive operations in electricity generation, distribution, and retail. The company is committed to the energy transition and digital transformation, offering roles in engineering, IT, data, and finance. For international professionals, Iberdrola provides opportunities to work on large-scale renewable projects and smart grid initiatives, with a strong emphasis on innovation and sustainability.
- Industry
- Energy and Utilities
- Founded
- 1992
- Employees
- 30,000–50,000
- Headquarters
- Bilbao, Spain
- In Spain
- Bilbao, Madrid, Valencia and 2 more
Good to know if you are moving
- Iberdrola is headquartered in Bilbao, Spain, and has a strong presence across the country, with offices and facilities in Madrid, Valencia, and other cities.
- The company is a global leader in renewable energy, particularly wind power, offering opportunities to work on cutting-edge projects in the energy transition.
- Iberdrola has a diverse international workforce and operates in multiple countries, making it a welcoming environment for international professionals.
- The company offers roles in various fields, including engineering, IT, cybersecurity, and data, with a focus on digital transformation and sustainability.
- Iberdrola is committed to diversity and inclusion, with initiatives to support people with disabilities and promote equal opportunities.
In their own words
About the company & team
At Iberdrola, diversity, equity, and inclusion are essential points in our daily work. We are proud to be a company where there is equal opportunity and where all people are welcomed, valued, and respected regardless of sex, disability, race, religion, sexual orientation, age, marital status, nationality, or gender identity.
More jobs like this
or browse Mid-level·IBEX 35·Energy & Renewables·Spanish Brands·Top Employers Spain·Community of Madrid·Energy and Utilities
🇬🇧
🇬🇧
€35k
🇬🇧
🇬🇧
🇬🇧 🇪🇸
🇬🇧