S

Santander

Global retail and commercial banking group

Cybersecurity Manager - CTU

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeBoadilla del Monte, Madrid, Spain

About the Job

Requirements

  • A degree in a STEM-related discipline is required.
  • Relevant cybersecurity certifications are required.
  • Fluent English and Spanish are required.
  • At least 9 years of cybersecurity experience, with progressive responsibility in security operations, incident response, and technical leadership, is required.
  • Experience leading cybersecurity teams and coordinating cross-functional stakeholders in complex, multi-country environments is required.
  • Experience overseeing cybersecurity projects, service improvements, and operational priorities in coordination with internal teams and external providers is required.
  • Demonstrated ability to manage incidents, escalations, and remediation activities from identification through resolution is required.
  • Hands-on experience in cybersecurity operations, particularly Protect, Detect, and Respond capabilities and related tools, controls, and processes, is required.
  • Knowledge of incident management and SOC escalation coordination, including triage, prioritization, containment, and follow-up actions, is required.
  • Experience with SIEM platforms, including log ingestion monitoring, configuration, use case management, tuning, and lifecycle maintenance, is required.
  • Expertise in cyber infrastructure security, including firewall, WAF, proxy, antimalware, certificate, and related security control management, is required.
  • Experience in attack surface management, including inventory maintenance, ethical hacking coordination, vulnerability tracking, and remediation governance, is required.
  • Understanding of security hardening and compliance across multiple technologies and environments is required.
  • Experience managing security operations across large, distributed environments, ideally in financial services or similarly regulated industries, is preferred.
  • Knowledge of cloud security posture management, including monitoring, configuration review, and remediation tracking, is preferred.
  • Experience reviewing and managing the lifecycle of secure development findings and security issues raised during application or code assessments is preferred.
  • Ability to monitor cyber intelligence feeds, assess relevance, and identify emerging threats affecting the organization is preferred.
  • Team management, project management, communication adapted to different levels, documentation and presentation, organization and planning, and workload management are listed as soft-skill requirements.

Responsibilities

  • Oversee technical cybersecurity tasks for the Auto Mobility Finance units in scope, covering approximately 14 entities in 16 countries, and directly manage the CTU unit in SCF headquarters, Western Hub, and Global Services.
  • Manage cyber incidents and coordinate SOC escalations.
  • Monitor SIEM log ingestion, configure new ingestion, and manage use cases.
  • Support cyber infrastructure issues and manage changes involving firewalls, WAF, proxies, antimalware, certificates, and related controls.
  • Manage the attack surface, including maintaining the IFA inventory, planning ethical hacking, and managing vulnerability remediation.
  • Monitor and manage cloud security posture.
  • Manage security hardening compliance across different technologies.
  • Review security development findings and manage their lifecycle.
  • Monitor cyber intelligence feeds and identify key threats to SCF.

Desired Qualifications

  • Experience managing security operations across large, distributed environments, ideally with exposure to financial services or similarly regulated industries.
  • Knowledge of cloud security posture management, including monitoring, configuration review, and remediation tracking.
  • Experience reviewing and managing the lifecycle of secure development findings and security issues raised during application or code assessments.
  • Ability to monitor cyber intelligence feeds, assess relevance, and identify emerging threats affecting the organization.

About the Company

Santander

Global retail and commercial banking group

Santander is a global bank focusing on retail and commercial banking in Europe and the Americas, serving individuals and SMEs with regional franchises and a broad consumer finance arm, plus a Corporate & Investment Banking division for multinational clients. It uses its Gravity cloud platform to migrate core banking and rapidly deploy digital services such as Openbank across markets, combining fintech-style agility with a bank's balance sheet. The bank differentiates itself by marrying a large retail footprint with global CIB capabilities under the One Santander verticals model to boost efficiency and cross-border revenue. Its goals include improving returns on tangible equity and financing the green economy through sustainable finance and renewable energy projects.

Company size
10,001+
Company stage
IPO
Headquarters
Boadilla del Monte, Spain
Founded
1902

Recently Posted Jobs

Explore more opportunities at Santander

See more jobs