Senior Cyber GRC Specialist

About the role

The Senior Cyber GRC Specialist will support the implementation and oversight of Santander Consumer Finance Global Services' Cyber Transformation Plan, ensuring alignment with corporate cybersecurity policies, regulatory requirements, and risk management frameworks.

Key responsibilities

• Report cybersecurity governance, risk and compliance status to corporate security functions and second‑line stakeholders.
• Supervise cybersecurity plans, define and monitor budgets, and track Key Risk Indicators, Technology Health maps and performance metrics.
• Manage the cyber risk lifecycle, including identification, assessment, mitigation and reporting.
• Coordinate local Cybersecurity Director Plans to align with global strategies and corporate objectives.
• Assess existing governance practices, propose improvements, and promote standardisation across countries.

Required profile

• Minimum 4 years of experience in cybersecurity governance, risk & compliance, IT risk management or related fields.
• Experience working in regulated environments and coordinating governance activities across multiple stakeholders or geographies.
• Advanced English (B2/C1) and professional Spanish proficiency preferred.

Required skills

• Strong understanding of cybersecurity threats, vulnerabilities and control deficiencies.
• Knowledge of GRC frameworks, risk assessments, KRIs, RCSA and cyber metrics.
• Familiarity with cybersecurity regulations, policies and standards for financial institutions.
• Experience with cybersecurity budgeting concepts (CAPEX, OPEX) and vendor/third‑party management.
• Professional certifications such as CISSP, CISM, CISA, CEH or CSX (preferred).