SPECIALIST Non-Financial Risk Specialist | Cyber and IT (2LoD)

Your contribution matters and will be recognized. You can expect a fair and competitive compensation package that reflects the impact you create and the value you deliver.

But we know that rewards go far beyond numbers.

• We offer more than a salary. Our benefits are designed to support your life, your goals and your well-being, now and in the future.

• Your health is our priority. Through BeHealthy, our global well-being program, we promote holistic well-being.

• We know that family is everything. That's why we offer parental leave, childcare support and programs tailored to every stage of life.

• We empower our teams through global opportunities and diverse career paths.

• We believe in the power of helping. You can dedicate part of your working time to volunteering activities.

We are here to keep you motivated, help you achieve your goals, and celebrate your progress at every step of the way.

SPECIALIST Non-Financial Risk Specialist | Cyber and IT (2LoD)Country: Portugal

START HERE

Santander (www.santander.com) is evolving from a global brand with great impact into a technology-driven organisation, and our people are at the centre of this journey.

Together, we are leading a customer-centric transformation, which values critical thinking, innovation, and the courage to challenge what is possible.

This is more than a strategic change. It is an opportunity for motivated people to grow, learn, and make a real difference.

Our mission is to help more people and businesses prosper. We have adopted a strong risk culture, and all of our people, at every level, play an active and responsible role in risk management.

YOUR IMPACT

• Exercise oversight and challenge to the 1st Line of Defense regarding the design, implementation, and effectiveness of Cybersecurity and IT risk frameworks, assessing alignment with corporate and regulatory requirements and the Bank's risk appetite.
• Analyze risk assessments, indicators, vulnerabilities, exceptions, control deficiencies, and remediation plans, ensuring an independent view of the technological and cyber risk profile.
• Review and challenge Cyber and IT policies, regulations, methodologies, and standards, ensuring clarity of responsibilities, coherence between frameworks, adequate integration into the global non-financial risk model, and the promotion of a risk culture aligned with the Organization's risk appetite.
• Monitor relevant technological and cybersecurity incidents, exercises, control tests, and resilience assessments, including incident reporting, digital resilience testing, and third-party risk management within the scope of DORA, challenging causes, impacts, lessons learned, and the sufficiency of corrective measures.
• Monitor KRIs, trends, material risks, and action plans, preparing analyses and reporting for governance forums, executive committees, audits, and supervisory entities, and promoting escalation when applicable.
• Perform monitoring of risks associated with the use of Artificial Intelligence, including governance, use case inventory, risk classification, technological dependencies, third parties, data quality, and regulatory evolution, coordinating with specialist areas.

The following requirements represent the essential knowledge, skills, and abilities for success in this role. Reasonable accommodations will be considered to allow people with disabilities to perform the essential functions.

Professional Experience

Academic Background

• Solid knowledge of technological and cyber risk frameworks and standards, such as NIST CSF, ISO/IEC 27001, COBIT, and EBA/ECB guidelines, as well as applicable DORA requirements.

• Analytical capacity, critical thinking, rigor, and independence of judgment, with the aptitude to perform constructive and sustained challenge to the 1st Line of Defense.
• Excellent written and verbal communication, ability to synthesize, organization, collaboration, and influence with technical and non-technical stakeholders.

If you consider this role to be of interest to you, apply.