Company Description Why work at Sopra Steria? Because it also means feeling **Sopra Steria**. We are a recognized European leader in consulting, digital services, and software development, with nearly 56,000 employees across almost 30 countries and over 4,000 in Spain. We focus on people—on their training and professional development—which drives our constant growth and improvement. We are passionate about the digital world, and just like you, we seek the best adventure. We want your everyday experience to become your greatest source of inspiration: to learn, contribute, have fun, grow—and above all, enjoy yourself to the fullest. If you want to join a "**Great Place to Work**" team, keep reading! Job Description **What challenge do we propose?** For our Cybersecurity Unit, we are seeking Cybersecurity Consultants specialized in GRC, based in Madrid. We welcome both junior and senior consultants. Requirements **What are we looking for?** We seek consultants with experience in cybersecurity, preferably in GRC or risk management: * Experience or participation in security risk assessments (SRA) * Basic knowledge of ISMS implementation and maintenance * Knowledge of regulatory frameworks: * ISO 27001 * ISO 22301 * ENS (desirable) **Competencies** * Risk identification and analysis * Support in modeling risk scenarios * Asset inventory management and updating **Responsibilities** **Risk Management** * Participation in information security risk analyses aligned with ISO 27001 / ENS * Identification of assets, threats, and vulnerabilities * Support in risk evaluation and assessment * Collaboration in defining and monitoring treatment plans * Asset Management * Support in asset inventory and classification * Maintenance and updating of the asset register within GRC tools **Regulatory Compliance** * Support in implementing and maintaining management systems compliant with: * ISO 27001 * ISO 22301 * ENS * Support in conducting regulatory gap analyses * Collaboration in updating policies, procedures, and documentation **Third-Party Management** * Participation in third-party security evaluations * Support in supplier risk analysis * Basic monitoring of security requirement compliance * Reporting and Governance * Support in defining and monitoring security KPIs * Preparation of reports (weekly and monthly) * Participation in security committees and governance bodies (PRM / TRM or others) Additional Information **What do we offer you?** * Indefinite-term contract and full-time schedule * 23 vacation days * Continuous training: technical, transversal, and language skills. Access to certifications, training from leading technology partners, online platforms—and much more! * Life and accident insurance * Option to enroll in our flexible compensation plan (medical insurance, childcare vouchers, transportation, meal vouchers, and training) * Access to the Privilege Club, offering attractive discounts with major brands * Personalized and detailed onboarding. We support you every step of the way so you feel \#soprano from day one. * Office featuring dedicated leisure spaces—where work and fun go hand in hand! * Team spirit and a positive atmosphere—we truly value the power of unity. And most importantly… You’ll have the opportunity to develop your professional career with us: Together, we’ll create a personalized career plan. You’ll receive training, we’ll set goals, and conduct follow-ups to ensure we achieve them together. We listen to your priorities—and fight for them. Your voice matters here! Join us and be part of something greater! **The world is how we shape it** At Sopra Steria, we are committed to building a diverse and inclusive environment, evaluating each application objectively based on competencies and experience. We firmly believe that diversity of experiences and perspectives is what fuels our innovation.
David Muñoz
Indeed · HR
David Muñoz
Indeed · HR
