Cyber Risk Manager

In this role you will be responsible for identifying, assessing, and mitigating cyber risks, ensuring compliance with regulatory requirements, and supporting business continuity and resilience.

• You lead cyber risk assessments across systems, vendors, and business units to identify and evaluate potential threats.
• The organization’s cyber risk register and heat maps are developed and maintained under your guidance.
• Working closely with IT, compliance, legal, and business teams, you help prioritize and remediate identified risks.
• You support the creation and implementation of risk policies, procedures, and internal controls.
• Cybersecurity threats, vulnerabilities, and incidents are continuously monitored and reported by you.
• You ensure compliance with relevant regulations such as GDPR, HIPAA, SOX, NIST, and ISO 27001.
• Internal and external audits related to cyber risk and security controls are facilitated by you.
• You conduct third-party risk assessments and promote awareness through training and communication initiatives.

• You hold a degree in Cybersecurity, Information Technology, Risk Management, or a related field.
• With at least five years of experience in cybersecurity, risk management, or information security, you bring deep expertise.
• You’re familiar with frameworks like NIST CSF, ISO 27001, COBIT, and FAIR.
• Certifications such as CISSP, CRISC, CISM, or CISA are a strong advantage.
• Analytical thinking, clear communication, and problem-solving are among your core strengths.
• Experience with GRC tools, cloud security, SaaS risk management, or incident response is a plus.
• You’re fluent in English (C1); German skills are beneficial.

Start Date: Immediately or by mutual agreement
Workload: 100%
Contract Type: Permanent position
Location: Terrassa, Spain; It would also be possible to work at another Syntegon location in Europe.

For Syntegon and its subsidiaries, diversity is a key concern. We explicitly welcome an environment where all employees, regardless of gender, age, origin, religion, sexual orientation, gender identity, or special needs, are treated equally. If this job posting uses only the male form, it is for readability purposes and refers to individuals of all genders.