Cybersecurity Strategy Analyst

About the role

Capgemini Invent is seeking a Cybersecurity Strategy Analyst to join its Digital Trust practice in Madrid. You will work with CIOs, CISOs and DPOs to design and implement security management systems and support digital transformation projects for a range of clients.

Key responsibilities

• Design and implement Security Management Systems (ISO 27001) and Business Continuity Management Systems (ISO 22301).
• Apply regulatory frameworks such as ISO, NIST, ENS, DORA, GDPR, PCI‑DSS and PSD2.
• Define security requirements, conduct risk assessments (MAGERIT, OCTAVE, ISO 31000) and develop strategic security plans.
• Perform offensive security testing, security audits and establish KPIs, KRIs, KGIs with scorecards.
• Create and deliver training and awareness programs for employees and senior management.

Required profile

• Bachelor’s or Master’s degree in Computer Engineering, Telecommunications, Cybersecurity, Mathematics, Statistics or a related field.
• 2‑4 years of experience in strategic cybersecurity, preferably in consulting or IT projects.
• Fluent in Spanish and English.
• Based in Madrid or willing to relocate.

Required skills

• ISO 27001, ISO 22301
• NIST, ENS, DORA, GDPR, PCI‑DSS, PSD2
• MAGERIT, OCTAVE, ISO 31000 risk‑assessment methodologies
• Offensive security testing and security audits
• KPI/KRI/KGI definition and scorecard monitoring

What we offer

• Opportunities to obtain certifications such as CISA, CISM, CRISC, CISSP, Data Protection Specialist, ISO 27001 Lead Auditor/Implementer, ISO 22301 Lead Auditor/Implementer.
• Exposure to multiple industry sectors and large‑scale transformation projects.
• Collaborative environment within a leading global consulting firm.