Exposure Management Data Analyst 100% (f/m/d)

Description

The company is Bank the company's Security Compliance Competence Centre in Madrid, which owns the data and measures behind what the bank reports about its security exposure.

You will maintain and extend the reporting estate, design the formulas that turn raw findings into decision-grade measures, and build reporting that a globally governed function needs under growing regulatory scrutiny.

Responsibilities

• Own, maintain and extend the dashboards and reports that show the bank its security exposure, across a growing set of modules.
• Start with the established areas: penetration testing, infrastructure vulnerabilities and security configuration baseline compliance.
• Write, document and version the formulas behind each exposure measure, so every published figure has one definition, one calculation and one owner.
• Build and maintain the queries and transformations that aggregate per-asset security results at scale, including coverage checks that tell an asset that passed apart from one that stopped reporting.
• Define measures for exposure domains entering management for the first time, where no metric exists yet. Propose each definition, justify it and build the reporting behind it.
• Design, validate and help adopt an aggregated per-service exposure score for proportionate, risk-based governance. It starts as an experiment, and you will decide whether it earns operational use, working with stakeholders across delivery and governance.
• Replace manual compilation of answers to supervisory requests with a standard, reusable, reproducible reporting process that maps each requirement to its underlying data.

Requirements

• Hands-on experience with an enterprise business intelligence platform, Tableau preferred, including data modelling, calculated fields, level-of-detail expressions, extract strategy and performance tuning.
• Proven track record designing and documenting metrics and composite scores, including weighting, handling of missing data, sensitivity analysis and validation.
• Experience defining a measure from scratch in a domain without one, and getting the people it measures to accept it.
• Scripting for data transformation and automation, ideally Python, producing maintainable, documented, version-controlled work.
• Bachelor's degree in computer science, data engineering, information security or equivalent practical experience.
• Five or more years in data analytics or data engineering, with direct ownership of reporting that others rely on.
• Fluent English.

Conditions

Based in Madrid within the Security Compliance Competence Centre.

Apply through the company's online application tool.