Junior Cybersecurity Specialist

• Education in Computer Science, Telecommunications, Cybersecurity, or a related field. We also value higher vocational training and profiles that are finishing their studies.

• Basic knowledge of information security, risk management, controls, and fundamentals of IT systems and services.

• Interest in security governance, compliance, process improvement, and information organization.

• Analytical capacity, order, attention to detail, and documentary rigor.

• Good communication, initiative, and willingness to learn and collaborate with IT, business, Risk, and Audit teams.

• English level that allows for understanding technical documentation and participating in work meetings.

• Familiarity with GRC tools, Jira, or Confluence will be valued, although mastering them from day one is not essential.

• It is not necessary to master all tools from day one. We especially value potential, attitude, and the capacity to learn.

Our value proposition, #HappyIskaylife, brings together initiatives that promote well-being in its 5 dimensions: physical, emotional, social, professional, and financial, with measures such as:

• Flexible start and end times, with a hybrid model (50% remote work) and intensive working days on Fridays and during July and August.
• #petfriendly environment: you can bring your pet to the office!
• Possibility of flexible compensation (restaurant vouchers, childcare, and transport), health insurance for you and your family, and psychological support services.
• We invest in your talent with continuous training and professional development tailored to you.

And this is only part of it; we have many more initiatives designed to take care of you and accompany you in your day-to-day life.

Join the Leading Group in Animal Care!

Grupo IskayPet is born from the union of the Kiwoko ecosystems (physical and online stores, Mundo Belleza grooming salons, and Kivet Veterinary Centers) and Tiendanimal (physical and online stores, Salón de Belleza grooming salons, and Clinicanimal Veterinary Centers) following the acquisition by EMEFIN, a Peruvian family business group with over 80 years of experience in retail. Both ecosystems maintain their own identities while combining capabilities to offer the most complete proposal in pet care.

Today, with a presence in Spain and Portugal, more than 300 workplaces, and 4,000 people, we work to be benchmarks in animal welfare, under our mission: "To care for animals and make life better".

We are currently looking for a person for the position of Junior Cybersecurity Governance and Management Technician in the Digital area for our MADRID offices.

• Under the supervision and leadership of the Cybersecurity Manager, develop and evolve the Information Security Management System using the GRC Cyber tool.

• Maintain and improve the controls map, ensuring its relationship with risks, policies, evidence, and owners.

• Manage the lifecycle of security exceptions, including their registration, justification, approval, monitoring, and review.

• Maintain the security incident register and the traceability of associated actions and lessons learned.

• Integrate requirements, findings, and action plans from audits, risk assessments, and other control reviews into the ISMS.

• Prepare metrics, dashboards, and periodic reports on risks, controls, exceptions, incidents, and action plans.

• Collaborate on the integration of Eramba with Jira to improve the operational monitoring of actions, evidence, and workflows.

• Adapt and maintain in Jira the catalog of services offered by Cyber, along with their requests and associated workflows.

• Keep the ISMS documentation updated in Confluence, ensuring its order, consistency, versioning, and ease of consultation.

• Coordinate with IT, business, Risk, and Audit teams the collection of information and the monitoring of actions until their closure.

• A real desire to learn and build a career in cybersecurity governance, risk, and compliance, while maintaining a connection with technological and business reality.

• Rigor in documenting, relating information, following up, and closing tasks.

• Curiosity and judgment to ask questions, contrast evidence, and propose improvements.

• Ability to convert requirements and findings into clear and traceable actions.

• Progressive autonomy, without losing the ability to escalate doubts and work under supervision.

• A position with direct support from the Cybersecurity Manager and exposure to the construction of the group's Cyber function.