IT Risk & Compliance Analyst – SCFGS, Country: Spain
Based in Boadilla, Madrid.
Job Overview
You will be part of a key team within the IT Risk & Service Level function, helping strengthen the Group’s technology control and compliance model. You will play an active role in monitoring key indicators, including Top of the House metrics, following up on audits, interacting with regulators, and continuously improving compliance with technology policies and standards.
Responsibilities
- Ensuring disciplined follow‑up and effective closure of recommendations from internal and external audits, as well as supervisory requirements, ensuring quality and timely completion of action plans.
- Defining, monitoring, and reporting IT Key Risk Indicators, or KRIs, enabling early identification of deviations and decision‑making at senior management level.
- Ensuring the management and quality of IT controls and findings in corporate tools, such as VERUM, guaranteeing consistency, traceability, and alignment with the Group’s regulatory framework.
- Coordinating responses to regulatory and supervisory technology requirements, consolidating information and ensuring consistency in the documentation reported.
- Overseeing compliance with the Group’s IT policies, standards, and control frameworks, including the IT Risk & Compliance Framework, identifying gaps and promoting corrective actions.
- Preparing executive reporting, including Top of the House reporting, on IT compliance status, risks, and the evolution of key indicators.
- Collaborating with Technology, Risk, and Audit teams to ensure the correct implementation and effectiveness of IT controls.
- Driving continuous improvement initiatives within the IT Compliance framework, strengthening the organization’s control and compliance culture.
Required Experience
- 2–4 years of experience in IT Risk, IT Compliance, IT Audit, or Internal Control roles in financial or highly regulated environments.
- Experience following up on internal and external audits and managing action plans associated with findings.
- Experience defining, monitoring, and reporting KPIs and KRIs at different levels of the organization.
- Experience evaluating or monitoring IT controls under control frameworks such as ISO27001, NIST, COBIT, or others.
- Experience coordinating regulatory requirements or interacting with supervisory or regulatory areas.
Desirable Experience
- Working with risk, control, or audit management tools, such as VERUM, Archer, ServiceNow, or others.
- Preparing executive reporting for committees or senior management.
- Knowledge and/or experience with corporate risk and control management tools, such as VERUM, Heracles, or others.
- Knowledge of the regulatory and compliance environment applicable to IT in banking.
Languages
- Spanish – Required
- English – Required
Technical Skills
- Knowledge of IT control and compliance frameworks, such as ISO27001, NIST, COBIT, or others.
- Ability to define, monitor, and analyze risk indicators, KRIs/KPIs, and dashboards.
- Experience managing IT controls, risks, and findings under corporate frameworks.
- Advanced use of analysis and reporting tools, including Excel and PowerPoint.
- Experience with data visualization tools, such as Power BI or similar.
Desirable Technical Skills
- Knowledge of corporate risk and control management tools, such as VERUM, Heracles, or others.
- Knowledge of the regulatory and compliance environment applicable to IT in banking.
Interpersonal Skills
- Strong analytical skills and attention to detail.
- Ability to synthesize information and communicate effectively, especially for executive reporting.
- Proactive and results‑oriented in demanding environments.
- Ability to organize work and follow up on multiple initiatives in a disciplined way.
- Ability to work collaboratively in global and multidisciplinary environments.
- Critical thinking and ability to identify risks and propose improvements.
- Adaptability and continuous learning in changing environments.
Benefits
- Hybrid working model – some days remote and others in the office with your team – as well as flexible working hours.
- Access to hundreds of courses on Santander Open Academy.
- Highly competitive salary plus a bonus for achievements.
- Access preferential banking conditions, special interest rates on loans, life insurance, and more.
- BeHealthy global wellbeing program promoting physical, emotional, social, and financial wellbeing.
- Childcare support and family programs designed for every stage of life.
- Access to Santander Contigo – legal advice, emotional support, and administrative assistance services.
- Gym/WellHub, medical centers in several facilities, meal subsidy, parking, shuttle service from different points in Madrid, plus exclusive discounts and offers for employees.
Equal Employment Opportunity
Santander is proud to be an equal opportunities organization, regardless of age, gender, disability, marital status, ethnicity, religion, or sexual orientation. We are committed to offering an inclusive and accessible recruitment process for everyone.
