The English-language job board for Spain

Cybersecurity Analyst

Hybrid in Barcelona·Full-time·Added 20 days ago (last checked 26 Oct)

Agency

Michael Page España

2363 open roles

Apply

Our summary

Work mode: Hybrid, Barcelona
Contract: Permanent, full-time hours
English: Required
Experience: Senior level
Benefits: Private health insurance, life insurance, meal vouchers

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

Requirements

What we're looking for

Experience working in Cyber Security Governance, Risk & Compliance (GRC), Security Management, or Information Security roles.
Experience with ISO 27001, NIST Cybersecurity Framework, CIS Controls, or similar frameworks.
Experience conducting security risk assessments and security control reviews.
Experience supporting audits, compliance activities, and assurance programmes.
Experience performing vendor or third-party security assessments.
Strong understanding of information security principles and cyber risk management.

Skills & Competencies

Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.
Ability to translate technical security concepts into business language.
Strong stakeholder management and influencing skills.
Ability to work independently and manage multiple priorities.
High attention to detail and quality.
Strong presentation and reporting capabilities.
Collaborative mindset with experience working in global, multicultural environments.

Nice to have

Desirable

ISO 27001 Lead Implementer or Lead Auditor certification.
CISSP, CISM, CRISC, or equivalent certification.
Experience with OneTrust, CyberVadis, ServiceNow, Jira, or GRC platforms.
Experience delivering security awareness programmes.
Experience supporting Data Protection Impact Assessments (DPIAs).

Pay & benefits

What you'll get

Competitive salary aligned with your experience
Permanent, full-time contract
Meal vouchers
Private health insurance
Life Insurance
Hybrid working model (2 days of home office/week)
Multicultural environment
Training and internal development opportunities
A vibrant and dynamic international workplace located in Barcelona

The role

The Senior Cyber Security Analyst will support cyber security governance, risk management, compliance, vendor security, and security awareness across a global organisation. Working closely with business, technology, and security teams, the role focuses on managing cyber risks, supporting ISO 27001 and audit activities, assessing third-party security, and strengthening the organisation's overall security posture.

Strategic visibility and business impact
Broad GRC exposure in a mature security environment

What you'll do

- Identify, assess, document, and manage cyber security risks across technology, business processes, projects, and third parties.
- Maintain and improve the Cyber Security Risk Management framework aligned with NIST, ISO 27001, CIS, and business requirements.
- Support business stakeholders in understanding and managing security risks.
- Support the development, maintenance, and continuous improvement of the Information Security Management System (ISMS).
- Assist with ISO 27001 certification activities, surveillance audits, and internal control reviews.
- Monitor compliance with security policies, standards, and regulatory obligations.
- Perform security assessments of suppliers, partners, and service providers.
- Work with Procurement, Legal, Privacy, and Technology teams to ensure third-party risks are appropriately managed.
- Support ongoing monitoring of critical vendor security posture.
- Support the delivery of the global Cyber Security Awareness Programme.
- Create and maintain awareness content, campaigns, phishing simulations, communications, and training materials.
- Promote a positive security culture across the organisation.
- Develop, review, and maintain security policies, standards, procedures, and guidelines.
- Ensure documentation remains aligned to industry standards and business objectives.
- Assist business and technology teams with policy interpretation and implementation.
- Collaborate with Cyber Security Operations and Cyber Security Architecture teams to improve the overall security posture.

Hiring process

2 steps2 interviews

CV registration
Consultant contact
With a specialist Michael Page consultant
If they see that your experience and motivations fit the values and needs of a hiring company, they will contact you to start the selection process: they will learn about your expectations, answer your questions and help you prepare for each stage of the process.
Company interview
With a client company
If your application progresses, we will help you prepare for the interview with useful information about the company, its culture and what it looks for in a profile like yours.
Final stage and negotiation · With a client company

The final stages are set by the client company: Michael Page acts as an intermediary, and the interview and decision rest with the hiring company.
Support continues after the contract is signed.
Michael Page cannot support every candidate; registering and keeping your profile up to date opens the door to future processes.

About Michael Page España

Michael Page is a global recruitment consultancy and part of PageGroup, one of the world's leading professional recruitment firms. The company specializes in placing mid-to-senior level professionals across a wide range of sectors, including technology, engineering, finance, sales, and human resources. With a strong presence in Spain, Michael Page operates offices in major cities and offers services such as executive search, temporary staffing, and outsourcing solutions.