Cybersecurity Risk Management Specialist
20 hours ago
Sant Just Desvern
ph3Cybersecurity Risk Management Specialist /h3 pbDate: /b Jul 19, 2026 /p pbLocation: /b Sant Just Desvern, B, ES, 08960 /p pbCity: /b Sant Just Desvern bState: /b Barcelona (ES-B) bCountry: /b Spain (ES) bRequisition Number: /b 45350 /p h3Overview /h3 pThe Cybersecurity Risk Management Specialist demonstrates a high level of professionalism, prioritizing the effective management of cybersecurity governance, risk, and compliance activities. This role will perform and continuously improve risk management assessments, risk registration, prioritized risk remediation, application evaluations, and will maintain the risk register in Bunge’s Governance, Risk and Compliance automation to support the overall effectiveness of the BT organization in alignment with Risk Management standards (e.g., NIST 800-30, 800-37, NIST CSF 2.0). /p h3Essential Functions /h3 pServe as liaison to coordinate Governance, Risk, and Compliance activities with key stakeholders to enable effective Cybersecurity, risk assessment, risk registration, exception management, issue management, and alignment with applicable internal standards and industry best practices (e.g., NIST, ISO, COBIT, PCI DSS) as needed. /p pDefine and identify control gaps, provide recommendations for control process improvements, and support control owners’ corrective action plans for remediation. /p pConduct risk assessments, internal audits, and investigations to identify and address potential compliance issues. /p pPerform risk analysis and document findings, including identification of control gaps, risk ratings, and recommended remediation actions aligned with organizational risk appetite. /p pEffectively utilize process automation and reporting through Bunge’s Governance, Risk and Compliance (GRC) automation – Optro Infosec. /p pActively collaborate and support partner functions across Bunge’s Governance, Risk and Compliance functions, and with stakeholders throughout BT and Cybersecurity. /p pExecutes short to mid-term strategic initiatives driven by the department, including collaboration with partner Governance, Risk and Compliance functions. /p pRecognized as an expert, both internally external to Bunge in the design, performance and continuous improvement of governance, risk and compliance related services and capabilities. /p pSupports the evaluation, prioritization, registration, monitoring, and mitigation of risks and compliance and control deficiencies through collaboration with various functions within BT and across various Bunge business stakeholder groups (e.g., Internal Audit, Legal, Compliance, Privacy). /p pLeverage industry experience and knowledge of applicable best practices, frameworks, and guidance to define effective programs, monitor, and strengthen internal controls, risk-prioritize requisite remediation, and improve the overall posture of Bunge’s BT and Cybersecurity internal control environment. /p pSolve highly complex, multidimensional problems that require extensive investigation and advanced application of expertise to determine root cause, to advise leadership on appropriate remediation methods, and to mitigate or remediate internal controls to an acceptable level of residual risk, across various functional areas of Business Technology and Cybersecurity, including longstanding or unprecedented improvements without a historical precedent. /p pLeverage both a measured reactive and a deliberate proactive approach to the assurance and continuous improvement of BT and Cybersecurity internal controls, staying informed of emerging industry trends and techniques and changes in regulations to ensure continuous compliance. /p pEffectively partner with colleagues within Bunge’s Governance, Risk and Compliance function, across BT and Cybersecurity, and with various business stakeholders to ensure the adequacy and sufficiency of internal controls and supporting capabilities. /p pActively contribute to large global projects that include governance, risk and compliance related capabilities and scope to ensure adherence to applicable policies, assurance of control performance, and the achievement of team and program goals. /p pEducate BT leadership and functional areas about design adequacy, operating effectiveness, and techniques to ensure continuous compliance and improvement over their internal controls. /p h3Qualifications /h3 ul liBachelor's degree in computer science or information systems, risk management, accounting, finance, or equivalent combination of education and work experience. /li li7+ years of experience in compliance and controls assurance, internal audit, or a related field. /li liExtensive knowledge of IT/Cyber Risk Management practices and frameworks required. /li liDemonstrated experience in the monitoring and improvement of Information Technology general controls, Cybersecurity controls, and/or compliance programs required. /li liSolid understanding of Governance, Risk and Compliance methodologies and effective automation through GRC tooling. /li liNice to have: Experience with Optro InfoSec preferred (i.e., Cyber Risk Management, CrossComply and Third-Party Risk Management modules). /li liProven experience implementing Information Technology and Cybersecurity governance, risk, and compliance programs required. Examples include, but not limited to: COBIT, NIST CSF 2.0, ISO 27k, NIST 800-30, NIST 800-37, NIST 800-161, NIST 800-53. /li liCertifications such as CISA, CRISC, CGEIT or CISSP preferred. /li liAbility to manage and execute numerous parallel activities in a fast‑paced, dynamic environment. /li liAbility to build and maintain constructive and collaborative working relationships with a diverse community throughout the organization. /li liAbility to effectively communicate and articulate risk management in both written and verbal manner to influence both technical and non‑technical audiences at all levels of the company, including executives. /li liExcellent analytical and problem‑solving skills. /li liActively shapes our company culture (e.g., supporting employee resource groups, mentoring employees, volunteering, joining cross‑functional projects). /li liChampions our cultural norms (e.g., willing to have cameras when it matters, helping onboard new team members, building relationships, etc.). /li liDemonstrate a company ownership mindset, thinking beyond boundaries of their own area and responsibilities. /li liAbility to work with limited direct management to participate in governance, risk and compliance related efforts, improve practices, coordinate cross‑functional activities and to successfully deliver strategic outcomes. /li liRecognized as an expert in IT and cybersecurity risk management. /li liCan apply both a measured reactive and a deliberate proactive approach to the assurance and continuous improvement of BT and Cybersecurity internal controls, staying informed of emerging industry trends, risks and techniques and changes in regulations to ensure continuous compliance. /li liLeverage industry experience and knowledge of applicable best practices (e.g., COBIT, NIST CSF, ISO 27k, NIST 800-30, NIST 800-37, NIST 800-161, NIST 800-53) frameworks, and guidance to establish effective governance, strengthen internal controls, risk‑prioritize requisite remediation, and improve the overall posture of Bunge’s BT and Cybersecurity programs. /li liApply expertise to determine root cause, to advise leadership on appropriate remediation methods, and to mitigate or remediate internal controls to an acceptable level of residual risk, across various functional areas of Business Technology and Cybersecurity, including longstanding or unprecedented improvements without a historical precedent. /li liAbility to work independently and as part of a cross functional team. /li /ul /p #J-18808-Ljbffr
Waiters
Sales & Marketing
Chef & Cook
Retail
Salon & Beauty
Construction & Trades
Quick Service
Accounting & Finance
Animal Care
Art, Media, Design
Bar Staff
Barista
Child Care
Cleaning
Customer Service
Driver & Delivery
Education
Engineering
Entertainment
Events & Promotion
Fashion
Healthcare
Host & Hostess
Information Technology
Kitchen Porter
Legal
Management
Manufacturing
Office & Admin
Science
Security
Sports & Wellness
Warehouse
Writing & Editing
Other
