Cybersecurity Strategy Consultant (Business Continuity)

About the role

Join Capgemini Invent’s Digital Trust department as a Cybersecurity Strategy Consultant focused on Business Continuity. You will help CIOs, CISOs and DPOs secure their organisations by implementing leading‑edge security and continuity frameworks for clients across Europe.

Key responsibilities

• Implement Information Security Management Systems (ISO 27001) and Business Continuity Management Systems (ISO 22301).
• Apply regulatory frameworks such as NIST, ENS, DORA, GDPR, PCI‑DSS and PSD2.
• Define security requirements for services and development projects.
• Conduct risk assessments using MAGERIT, OCTAVE and ISO 31000.
• Develop strategic security plans, governance models and KPI/KRI/KGI scorecards.
• Perform offensive security testing and security audits.
• Design and deliver security training and awareness programmes for staff and senior management.

Required profile

• Bachelor’s or Master’s degree in Computer Engineering, Telecommunications, Cybersecurity, Mathematics, Statistics or a related field.
• 2‑4 years of experience in strategic cybersecurity, preferably in consulting or IT project environments.
• Fluent in Spanish and English.
• Based in Madrid or willing to relocate.

Required skills

• ISO 27001, ISO 22301
• NIST, ENS, DORA, GDPR, PCI‑DSS, PSD2
• MAGERIT, OCTAVE, ISO 31000 risk‑assessment methods
• Offensive security testing
• Security audit execution
• KPI/KRI/KGI definition and monitoring
• Security regulatory framework development
• Training and awareness programme creation

What we offer

• Support to obtain certifications such as CISA, CISM, CRISC, CISSP, Data Protection Specialist, ISO 27001 Lead Auditor/Implementer, ISO 22301 Lead Auditor/Implementer.
• Exposure to multiple industry sectors and large‑scale transformation projects.
• Collaborative, innovative work environment with strong career development pathways.