IT Risk Compliance Junior - SGT&O; Málaga
Country: Spain
**WHAT YOU WILL BE DOING**
**SGT&O; **is looking for an **I **T RISK COMPLIANCE JUNIOR **, **based in our **MÁLAGA **office **.**
**WHY YOU SHOULD CONSIDER THIS OPPORTUNITY**
**Santander Integral Technology (SGT) **is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over 2,000 people in 7 countries (Spain, Portugal, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms.
Santander is proud of being an organization where there are equal opportunities regardless of gender identity, culture and disability. Our mission is to contribute to help more people and business prosper.
**WHAT YOU WILL BE DOING**
As an **IT Risk Compliance Junior **team, and you would be responsible for supporting SCIB IT Strategy, understanding the different Business Domains and countries’ needs, and implementing new and innovative IT Risk controls in SCIB Processes and Technology complying with Policies and Regulators. The main objective of this role is to identify IT Risk new threats and operational improvements, and to define and to implement new and innovative security controls.
We need someone like you to help us in different fronts:
- **Software Development Life Cycle (SDLC)**:The objective of this domain is to define and establish the security requirements throughout the IT solutions development or acquisition life cycle and to lay the foundations for secure processes for new or major changes in IT solutions.
- **Patching and Product Update**:The objective of this domain is to establish regular testing that must be carried out by the Group and its subsidiaries in relation to the identification, management, and remediation of vulnerabilities to help prevent cyber security attacks and incidents.
- **Obsolescence Management**:The objective of this domain is to define and stablish a continuous monitoring process of the SCIB IT Assets (Hardware and Software), ensuring that plans are defined and implemented to mitigate obsolescence following Group Risk appetite.
- **IT Service Continuity**:The objective of this domain is to stablish the aspects that must be taken into account to guarantee the continuity of the data and IT Services, within the Recovery Point Objective (RPO) established in the Business Impact Analysis (BIA).
- Work together with Corporate Teams understanding the **Corporate Policies related to IT Risk **. Continuously assess IT Risk Internal Policies compliance, defining action drivers to cover gaps.
EXPERIENCE
- No needed.
EDUCATION
- Degree such in computer science, engineering or similar.
SKILLS & KNOWLEDGE
- Advanced user in Office 365.
- High level of English.
- Great communication skills.
- Good Knowledge of IT systems, infrastructure and architectures.
- Team management and collaborations skills.
- Proactive and motivated.
- If you want to know more about us, follow us on: _