❗️This is 100% office-baced role. Remote or hybrid arrangements are not available once you join the team. We are looking for a candidate who is already based in Valencia.

We are seeking an Information Security Analyst (Data Protection) to join our team at our Valencia, Spain office.

✅ Responsibilities: 
✔️ Data Integrity & Leakage Control Implementation: Working with specialized internal systems to set up and manage data protection controls and monitor for suspicious activity in different systems. 
✔️ Operational Management: Helping to add security monitoring to new business processes and systems where automated protection is not yet available. 
✔️ Monitoring & Incident Escalation: Monitor signals from internal security systems and escalate suspicious cases to the Incident Response team. 
✔️ Investigation Support: Assist the security teams during internal investigations by providing evidence from the system. 
✔️ Product Ownership (Internal Tools): Act as a Business Analyst/Internal Stakeholder for internal Data protection tool development. Define new use cases, identify systems for integration, and formalize requirements for the development team. 
✔️ Testing & QA: Conduct functional testing for new features and system updates. 

✅ Requirements: 
Must have
✔️ Experience: At least 1 year of professional experience as an Information Security Analyst or in a similar role.
✔️ Data Privacy Knowledge: Understanding of data protection principles and controls. 
✔️ Business Analysis: Strong ability to gather requirements, document processes, and translate business needs into technical tasks for developers. 
✔️ Attention to Detail: Meticulous approach to managing controls across multiple systems. 
✔️ Proactive Communication: Ability to collaborate effectively with cross-functional teams, including Engineering, Product, Marketing, etc. 
Nice to Have:
✔️ Technical Literacy: Basic SQL skills for data verification and an understanding of how modern IT systems integrate (APIs, microservices). 
✔️ Incident Handling: Familiarity with Incident Response Process. 
✔️ Knowledge of ISO 27001, PCI DSS, or GDPR. 
✔️ Testing Experience: Previous experience in QA or functional testing.