HEAD OF ATTACK SURFACE MANAGEMENT & CYBER THREAT UNIT - SANTANDER DIGITAL SERVICES

Country: Spain

Hello! Welcome to the place responsible for developing the technology that improves the lives of 160 million customers around the world!

This job offer is an opportunity not only to join a great company but also to collaborate in projects that have a real impact on society.

We are looking for a Head of Attack Surface Management & Cyber Threat Unit based in our Madrid (Abelias) office.

Let’s get to know each other!

Santander Digital Services (SDS) is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over 7,000 people in 8 countries (Spain, Portugal, Poland, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms.

We are undergoing one of the biggest transformations in our history and technology is at the heart of our strategy. Join our team to play a part in one of the most important technological projects for the financial sector in the world.

One of our guiding principles is continuous innovation, working with Agile and DevSecOps methodologies and adopting all the leading market technology to work with the best tech stack.

We recently received Top Employer certification in Spain, Europe and globally for the sixth consecutive year and we are one of the World’s 25 Best Workplaces. We are very proud to be an equal opportunities organisation and we are building a dynamic and proactive team. All we ask from you is that you bring a positive attitude and share our values and a commitment to development of cutting-edge technology, no matter where you come from or where you end up.

Your role

We are looking for a Head of Attack Surface Management & Cyber Threat based in our Madrid  office, a key team in our technology ecosystem.

As Head of ASM and CTU, you will be responsible to manage and investigate cyber threats and incidents and drive strategy for Attack Surface Management Team:

• Manage CSIRT team responsible to manage complex cyber security incidents. Work in close coordination with Global Cybersecurity Services to respond and coordinate significant incidents ensuring successful resolution adopting lessons learnt to increase Bank Cyber resilience.  Orchestrate the necessary human and technological ressources to ensure successful resolution of cyberincidents

• Collaborate with key stakeholders within the bank, such as Global Forensics, Global Security Operations Centre, Crisis Management Director, Security & Intelligence, Fraud, Legal, Comms, Privacy, Risk & Compliance among others.

• Be available to participate in the incident response procedure in 24x7 basis and On-Call scheme.

• Champion advanced tools and technologies to enhance perimeter security capabilities.

• Optimizes the processes and standards of network defense implementation to strength the network security and reduce risk.

• Recommends security controls and/or corrective actions for mitigating technical and business risk.

• Drive continuous improvement in Santander´s cyber response capability through the delivery of a cyber readiness programme.

The role reports to the Santander Spain Head of Cyber & Fraud (CISO).

What you’ll bring

QUALIFICATIONS & EXPERIENCE

• Knowledge of Incident Response and Handling methodologies - Experienced level.

• Knowledge of cyber incident categories, incident response, and timelines for responses.

• Knowledge of standard Operating Procedures and regulations.

• Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).

• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

• Focus on service excellence

• Knowledge of Network security and strong technical background

LEADERSHIP & MANAGEMENT BEHAVIORAL COMPETENCIES

• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security incidents and risk-related concepts to technical and nontechnical audiences at various hierarchical levels, ranging from senior management to technical specialists

• Strategic leader and builder of both vision and bridges, and able to energize the appropriate teams in the organization

• Ability to lead and motivate the information security team to achieve tactical and strategic goals

• Excellent stakeholder management skills

• Excellent ability to manage multiple projects  and priorities under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives

• Strong leadership skills to develop and lead a high performing team of experts.

PERSONAL CHARACTERISTICS

• Ability to work under-pressure.

• Capable of producing high quality output with a strong focus on attention to detail.

• Strong communication skills, both written and verbal, to communicate effectively across a wide range of stakeholders.

• Ability to lead by influence and act as a thought leader to achieve results across multiple teams and stakeholders outside of direct line of reporting.

• Uses contingency planning, prioritization and delegation to achieve timely completion.

• Candidates must have effective negotiation skills, a proactive and ‘no surprises’ approach in communicating

• A self-starter, self-motivated, self-disciplined, self-assured, and performance driven mentality.

• Strong integrity, independence & resilience.

• Makes sound, well-informed, and objective decisions that support accomplishment of organizational goals.

OTHER INFORMATION

• Our team members come from very different types of companies, including banks, tech companies, trade companies, start-ups, and consulting firms. We believe in the power of diversity in backgrounds, nationality, gender, and more.

What is the Be Tech! experience like?

• Hybrid working model (working remotely some days and meeting with the team in the office on other days).

• Flexible working hours.

• Possibility of travelling to collaborate with teams in other countries.

• Opportunities to develop your career in different overseas units and countries.

• Continuous training in innovative technical fields so you are always up to date and have the tools you need to do your job.

• Career plan to ensure your professional growth and that your efforts are duly rewarded.

• Highly competitive salary and bonuses.

• Financial benefits (special interest rates for loans, preferential banking terms, pension plan, life insurance, etc.)

• Social benefits (gym and medical centre on the premises, daily meal subsidy with a choice of seven restaurants, parking, shuttle service to the centre of Madrid, discounts and offers with different companies for Santander employees and much, much more that we will tell you all about when you arrive!)

What now?

If you like what you’ve read so far, you’ll like it even more once you’re on board... So why not join us?

If you want to know more about us, follow us on https://es.linkedin.com/company/banco-santander

visit our website https://www.betechwithsantander.com/en/home