The English-language job board for Spain

Corporate Security Technician - Integral Security, Risk and Compliance

Hybrid in Madrid·Added 7 days ago

Redeia

46 open roles

Apply

Overview

Job details

Hybrid
Office and home days — the ad has the split.

Requirements

Have the right to work in Spain
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Work in English
English is required, per the ad.
Be near Madrid for hybrid days
No relocation package mentioned.
Have 5+ years of experience
Mid-level role.
University degree
“Formación Grado en Ingeniería Informática, Telecomunicaciones, Ciberseguridad o similar.” — per the ad.

This job was automatically translated to English.

Pay & benefits

What you'll get

A stable, quality job, where employability and functional mobility are key drivers for professional growth and development.
An environment that promotes diversity and equality.
Work-life balance, with different conciliation measures available to you.
A fair and competitive compensation model, aimed at reducing the pay gap between men and women and promoting equal opportunities.
Flexible working hours and hybrid work model.
A key project for the future within the sector. We look forward to having you on board to make it happen!.

Requirements

What we're looking for

Professional with a managerial/technical profile and management capacity, oriented towards risk supervision, compliance, and effectiveness of security controls within a second line of defense model.
Education
- Degree in Computer Engineering, Telecommunications, Cybersecurity, or similar.
- Languages: high level of English
Knowledge and Previous Experience
- 5+ years in cybersecurity roles, with at least 2 years in governance, risk management, or compliance.
- Management and coordination of security technical offices (OT/PMO GRC)
- Governance, Risk, and Compliance (GRC) in cybersecurity
- Security risk management and business continuity
- Evaluation of control frameworks and regulatory compliance (ISO, NIS2, ENS, etc.)
- Technical-operational analysis of security controls (not just documentary)
Experience in integrating cybersecurity into GRC models, aligning governance, risk, and compliance within the organization.
Experience in risk management and regulatory compliance, identifying and correcting control gaps.
Experience in monitoring risks and remediation plans, ensuring the resolution of vulnerabilities and the escalation of deviations.
Experience in translating technical risks into business impact to facilitate decision-making.
Experience in defining and evolving cybersecurity control frameworks, including policies, standards, and methodologies.
Experience in security evaluation from a second line of defense, defining scope, criteria, and methodology.
Experience in technical-operational analysis of security controls, evaluating their actual functioning (not just documentary).
Experience in third-party risk management, evaluating providers and the supply chain.
Experience in the management and coordination of security technical offices, integrating strategy, control, and execution.

Nice to have

Professional Certifications (desirable):
- CISM (Certified Information Security Manager)
- CISSP (Certified Information Systems Security Professional)
- CRISC (Certified in Risk and Information Systems Control)
- ISO 27001 Lead Implementer or Lead Auditor
Valuable experience in business continuity, evaluating BCP/DRP plans and their integration into the risk model.
Valuable experience in evaluating security incident management, supervising detection and response processes

The role

Do you want to be part of the leading company in the energy and telecommunications sector?
If you are motivated by the challenge of the energy transition and the development of telecommunications and want to be a part of it, are you up for the challenge?

Why Redeia?
We were born as the world's first TSO. Today, we are a global manager of essential electricity and telecommunications infrastructures and protagonists of the ecological and digital transformation. Redeia's identity reflects our true core: the network. A network composed of five brands, more than 2,100 professionals, and millions of people united by the value of what is essential.
Our purpose: to guarantee electricity supply and connectivity, driving a fair ecological transition with sustainability criteria, highlighting our neutrality, and contributing to social and territorial cohesion. We are ready!

We are looking to hire a Corporate Security Technician - Integral Security, Risks and Compliance to join the Corporate Security Dept. team at Redeia Corporación.

What you'll do

Ensuring compliance with regulations on comprehensive security, laws, and rules in Redeia's businesses.
Contributing to the development of the organization's cybersecurity strategy, policy, and procedures.
Identifying and documenting compliance gaps and coordinating the necessary measures for their resolution.
Coordinating comprehensive security assessments in the second line of defense within the organization's ecosystem.
Defining the scope, objectives, and criteria of the assessments.
Establishing the methodologies and practices used for system assessments.
Assisting in the design, implementation, evaluation, and compliance verification activities to ensure adherence to cybersecurity standards.
Supervising risk remediation activities arising from the assessments.

About Redeia

Redeia (formerly Red Eléctrica de España) is a Spanish energy infrastructure group that operates as the transmission system operator (TSO) for Spain's electricity grid and also manages the national telecommunications network. The company is a global leader in its niche, with a significant international presence in Latin America and other regions, and is a key player in the energy transition, focusing on renewable energy integration and grid digitalization.

In Spain, Redeia is headquartered in Madrid and has a strong national presence, with offices in major cities. The company is known for its stable, long-term employment and its role as a strategic national infrastructure operator. For international professionals, Redeia offers opportunities in engineering, IT, and corporate roles, with a work culture that values technical excellence and professional development, though Spanish language proficiency is often important for many positions.

Industry: Energy Infrastructure
Founded: 1985
Employees: 5,000
Headquarters: Madrid, Spain
In Spain: Madrid
Website: redeia.es

Good to know if you are moving

Redeia is a Spanish state-owned company, offering stable, long-term employment in a strategic national infrastructure sector.
The company is a global leader in its niche, with operations in Latin America, providing international exposure and career opportunities.
While many roles are in Spanish, there are opportunities for international professionals, especially in engineering and IT, where English may be used.
The company is actively involved in the energy transition, making it a relevant employer for professionals in the renewable energy and grid digitalization fields.
Madrid is the primary hub, offering a high quality of life and a well-connected international environment.

In their own words

Additional information

Main company commitments

At Redeia we celebrate talent and diversity and we are committed to an inclusive culture, where employees work to generate value for society and improve people's lives, true to our values: respect, integrity, sustainability.
Our employment policy ensures compliance with current legislation and is based on principles such as transparency and equality, ensuring non-discrimination on any grounds, including age, gender, sexual orientation and identity, culture, disability, or any other condition. We base our selection process on the qualifications and skills of the candidates, and we integrate all these commitments into our corporate culture and internal company policies. Are you going to miss the opportunity to develop with us? Come and meet us!.

All open roles at Redeia