Cybersecurity Engineering Analyst - SDS

Cybersecurity Engineering Analyst - SDS

Country: Spain

IT STARTS HERE

Santander (www.santander.com) is evolving from a global, high-impact brand into a technology-driven organization, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible.

This is more than a strategic shift. It’s a chance for driven professionals to grow, learn, and make a real difference.

Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management

.

Santander Digital Services is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over 7,000 people in 8 countries (Spain, Portugal, Poland, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms.

THE DIFFERENCE YOU MAKE

Santander Digital Services is looking for a Cyber Engineering Analyst

based out of Boadilla del Monte office, Madrid.

Your mission will be to support cybers security in the company, participating in
the definition, execution and follow up of cyber projects, controls, and business as usual activities, helping to strengthen our defenses against internal and external threats.

We’re shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:

• Manage cyber security controls looking for continuous improvement and threat containment, reduce risk vectors mitigation, and identify residual cyber risk.

• Analyze cyber events to detect and respond in time to prevent business impact, identify root cause, propose controls to prevent same events in future.

• Threat intelligence feeds analysis helping in the proactive identification of entity threats or risk vectors.

• Analyze vulnerabilities that could impact business, working with technical teams to prioritize remediation.

• Enable Defend services our company, with the primary function to prevent cyber attacks.

• Ensure relevant information and events being generated, captured and delivered to the central detect systems in a timely manner.

• Manage global cyber projects, identifying key actions and implementing based on entity needs.

• Security culture and people behavior: drive cyber security awareness and behaviors to build a security culture.

• Group Cyber security and strategy implementation: participate in the adoption of Global Controls minimum requirements in alignment with Business risk appetite as part of the cyber strategy.

WHAT YOU’LL BRING

Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organization. We’re enabling teams to go beyond by valuing who they are and empowering what they bring.

The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Professional Experience

• 3 years of professional experience in a similar position (Required)

• Knowledge of information technology and security solutions and frameworks, such as Cyber Security Framework from NIST

• Analysis of cybersecurity events to detect and respond to threats in time. Develop continuous improvement plans that allow us to focus on the most relevant events.

• Resolution of cybersecurity incidents in a timely manner. Evaluate and improve incident response plans, as well as the development of scenarios.

• Execution of cybersecurity controls aligned with the group's strategy, seeking continuous improvement and risk mitigation.

• Manage measures to prevent data leakage.

• Support in cybersecurity event plans to detect and respond to threats in time.

• Security Control for suppliers’ services.