B

Banco Bilbao Vizcaya Argentaria

Global banking and financial services

Information Security Analyst 1

Full-TimeDeadline 10/26/26
No salary listed
Mid
Bachelor's, Master's
Madrid, Spain
Hybrid
CybersecuritySecurity Governance, Risk & Compliance

About the job

Requirements
  • At least 3 years of experience in identity and information security.
  • Knowledge of cybersecurity and data-protection regulations, including DORA, NIS2, GDPR, and CCPA.
  • Professional English proficiency at B2–C1 level.
  • A degree in a STEM engineering or technology field.
Responsibilities
  • Ensure sound governance of user and application identities within Corporate Security Holding, ensuring applications comply with mandatory identity policies and standards, least privilege, segregation of duties, incompatibility identification, and the Group Identity strategy.
  • Ensure areas have the knowledge needed to manage internal, external, and impersonal user identities and implement least privilege and segregation of duties in access management.
  • Understand the end-to-end user management process.
  • Promote the development and maintenance of internal regulations required for the work and ensure compliance.
  • Define, maintain, and certify the functional authorization matrix and segregation-of-duties matrix for applications in the area of responsibility.
  • Act as second-level approver for access requests or individual requests involving medium or high risk, or technical users.
  • Monitor generated reports, evaluate information quality within the area of responsibility, and establish action plans to correct identified deficiencies and promote improvements.
  • Escalate identified risks to the relevant area working groups.
  • Monitor relevant key risk indicators and key performance indicators and act accordingly.
  • Participate in UAM/Identity Governance or similar working groups to support adoption of corporate identity-management models.
  • Ensure regulatory compliance and execute remediation plans for audit findings or weaknesses identified in the relevant assets.
  • Promote a security culture throughout the unit.
Desired Qualifications
  • Knowledge of security and risk-management standards such as ISO 27001 and SOC 2.
  • A master's degree in cybersecurity or security-management certifications such as CISM or CISSP.

About the company

B

Banco Bilbao Vizcaya Argentaria

View

Banco Bilbao Vizcaya Argentaria, commonly known as BBVA, is a multinational financial services group offering retail, commercial and corporate banking. It provides accounts, payments, lending, mortgages, investment products and financial guidance for individuals and businesses, alongside services for institutional clients. BBVA combines physical banking networks with digital channels and operates across multiple international markets. Its business spans everyday financial needs, business financing, wealth management and transaction services within the regulated banking industry. Its workforce combines specialist delivery, customer support and business operations.

Company Size

N/A

Company Stage

N/A

Total Funding

N/A

Headquarters

N/A

Founded

N/A