Exposure Management Data Analyst (100%) - Security Compliance

About the role

Julius Baer is hiring an Exposure Management Data Analyst (100%, f/m/d) for its Security Compliance Competence Centre in Madrid. The role owns the data and the measures behind the bank's reported security exposure, maintains and extends the reporting estate, designs the formulas that turn raw findings into decision-grade measures, and builds the reporting capability needed by a globally governed function under increasing regulatory scrutiny.

Key responsibilities

• Maintain and extend dashboards and reports on security exposure, starting with penetration testing, infrastructure vulnerabilities and security configuration baseline compliance
• Devise, document and version the formulas behind exposure measures so each figure has one definition, one calculation and one owner
• Build and maintain searches and transformations that aggregate per-asset security results at scale, including coverage checks
• Define new measures for exposure domains with no existing metric, proposing and defending them
• Design, validate and support an aggregated per-service exposure score, working with delivery and governance stakeholders
• Replace manual compilation of supervisory request responses with a standardized, reusable, reproducible reporting capability

Required profile

• Bachelor's degree in computer science, data engineering, information security or equivalent practical experience
• Five or more years of experience in data analytics or data engineering, including direct responsibility for reporting others depend on
• Fluency in English

Required skills

• Hands-on expertise with an enterprise business intelligence platform (Tableau preferred): data modelling, calculated fields, level-of-detail expressions, extracts and performance tuning
• Ability to design and document metrics and composite scores, including weighting, handling of missing data and validation
• Scripting for data transformation and automation, ideally in Python, with maintainable, documented, version-controlled work