Job Summary: At EY, the Technology Risk Assurance (Industrial Sector) role offers the opportunity to understand the technological environment of leading national enterprises and assess their technological risk controls. Key Highlights: 1. Opportunity to understand the technological environment of major enterprises. 2. Participation in the assessment of technological risk controls. 3. Continuous training and an individualized career plan. Location: Madrid Other locations: Primary Location Only Salary: Competitive Date: May 6, 2026 **Job description** ------------------- Requisition ID: 1691599 **At EY, we shape the future with confidence.** Here, you’ll find more than a job: an opportunity to grow, learn, and make an impact. Join our 7\.000 professionals across 15 offices in Spain and a global network of 400\.000 people working daily to transform businesses and societies. \#ShapeTheFutureWithConfidence \| \#EYCareers \| \#BuildingABetterWorkingWorld **The opportunity:** =================== At EY, we are a global leader in assurance, consulting, strategy and transactions, and legal and tax services. We are driven by innovation, technology, and our purpose to deliver lasting positive impact. In the **Technology Risk Assurance (Industrial Sector)** team, you will, from day one, gain insight into the technological environment of leading national enterprises. You will design and assess the controls implemented to manage their various technological risks, conducting interviews with the Technology Directors of these companies and their key collaborators. **Key Technology Risk Services:** ====================================================== * IT Security Auditing: Assessment of controls, user management, configuration reviews, and compliance with standards such as ISO 27001, NIS2, and sector-specific regulatory initiatives. * Technological Risk Analysis and Management: Analysis of technical and organizational risks, identification of vulnerabilities, and prioritization of corrective actions. * Regulatory and Compliance Advisory: Updating and reviewing security, privacy, and compliance policies and procedures (including GDPR, SOC, PCI DSS, among others). * Security Incident Response Assessment: Incident response, active monitoring, and review of alert configuration. * Consulting and Certifications: Expert advisory support to achieve and maintain professional certifications such as ISO 27001, NIS2, ISO 27001, SOC, as well as consulting on international regulations. * Security Process Definition and Implementation: Review, design, and automation of key processes such as user management and program changes. **Who we are looking for?** ====================== * Individuals holding a Bachelor’s or Master’s degree in Computer Engineering, Telecommunications, Software Engineering, or Law with specialization in information security. * Minimum 6 years’ experience in IT auditing, cybersecurity, and risk management, including participation in international projects. * Secure management of systems, databases, and virtualization, with particular focus on protecting and backing up critical environments. * Experience implementing hardening (bastioning) to reduce risks in platforms and infrastructures. * Specialization in ethical hacking and penetration testing techniques: vulnerability detection and exploitation, and report writing. Advanced proficiency with key penetration testing tools. * Advanced English language skills; additional languages are a plus. * Strong analytical ability, initiative, results orientation, and communication skills. * Valued certifications: CISA, CISM, CISSP, ISO 27001, GDPR, among others. **What we offer?** ====================== **Wellbeing and Personal Benefits** * Wellbeing HUB: Includes policies and initiatives supporting physical health (Wellhub) and mental wellbeing. * Life and Accident Insurance. * Bankinter Branch with special conditions. * EY Flex Flexible Compensation Plan (transportation, training, meal card, childcare, etc.). **Flexibility and Work-Life Balance** * Hybrid work model and flexibility aligned with project requirements. **Professional Development** * Continuous learning through EY University, with a personalized learning pathway. * Career development plan to support annual growth within the firm. * Personalized support: You will be assigned a Buddy and a Counselor throughout your journey. **Culture and Work Environment** * Dynamic and collaborative workplace. * Opportunity to collaborate with global, multidisciplinary teams. * Expansion of your professional network within a diverse and enriching context. **Social Commitment** * Social impact initiatives led by the EY Foundation. **\#LI\-HYBRID**
David Muñoz
Indeed · HR
David Muñoz
Indeed · HR
