IT Risk & Control Framework Consultant at Talan

Málaga, Andalusia, Spain -

Full Time

Start Date

Immediate

Expiry Date

06 Jul, 26

Salary

0.0

Posted On

07 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Yes

Skills

IT Risk Management, Cybersecurity, Internal Audit, External Audit, RCSA, Gap Analysis, DORA, Operational Resilience, Business Continuity, TPRM, Power BI, ServiceNow, Risk Assessment, Regulatory Compliance, Stakeholder Management, Control Framework

Industry

IT Services and IT Consulting

Description

Company Description Talan – Positive Innovation Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, we are committed to delivering impactful, future-ready solutions. Talan at a Glance Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we’ve built a strong presence in the IT and consulting landscape, and we’re on track to reach €1 billion in revenue this year. Our Core Areas of Expertise Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI. Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency. Management & Innovation Consulting: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies. We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications. Job Description As part of the IT Risk & Control Framework team, you will actively participate in: Managing technology and cybersecurity risks from a governance and control framework perspective. Participating in technology risk assessment processes (RCSA, risk assessments, gap analysis). Mapping Risks – Controls – KPIs/KRIs, ensuring traceability and consistency of the control framework. Analyzing audit findings (internal and/or external) and defining structured remediation plans. Implementing and monitoring regulatory requirements, especially in the areas of: o DORA o Operational Resilience o Business Continuity Third Party Risk Management (TPRM): o Third-party controls o Outsourcing o Technology providers Evaluation and improvement of policies, procedures, and technology standards. Preparation of: o Procedures and formal documentation o Dashboards and executive reporting o Material for Risk and Technology committees Preparation of reporting for senior stakeholders in a global environment. Qualifications What are we looking for? High level of English (spoken and written) – international environment. +3 years of experience in: - IT Risk Management, with a focus on technology and/or cybersecurity. - Internal and/or external auditing in technological environments. • Experience in: - Technological risk assessments (RCSA, risk assessments, gap analysis). - Risk–Control–KRI/KPI mapping. - DORA, operational resilience, and business continuity. - TPRM and third-party risk management. Experience in document management and reporting: - Drafting procedures. - Policy evaluation. - Participation in committees. Proficiency in visualization and reporting tools, especially Power BI. Knowledge of Microsoft and ServiceNow environments. Key Competencies : Structured thinking and strong control orientation. Ability to work independently and prioritize in demanding environments. Ability to interact with multiple stakeholders (IT, Risk, Compliance, Audit). Clear and effective communication, both written and verbal. Global vision of the technology control framework. Execution mindset: ability to translate regulations and frameworks into practical solutions. Proactive attitude, eagerness to learn and add value from day one. Ability to work in a team, contributing to a collaborative and positive environment. We value profiles with a good attitude, commitment, and a desire for continuous improvement. Additional Information What do we offer you? Hybrid position based in Málaga, Spain Possibility to manage work permits. Permanent, full-time contract. Smart Office Pack so that you can work comfortably from home. Training and career development. Benefits and perks such as private medical insurance, life insurance, Language lessons, etc Possibility to be part of a multicultural team and work on international projects. If you are passionate about data, development & tech, we want to meet you! Contract Type: Long term contract

Responsibilities

You will manage technology and cybersecurity risks by maintaining control frameworks, mapping risks to KPIs, and ensuring regulatory compliance. Additionally, you will draft procedures, prepare executive reporting, and support risk committees in a global environment.