IM Cybersecurity Evaluator Temporary

Description

The role sits in the Digital job family at the company Helicopters España, SA, as a temporary position through an agency. It is a professional-level role with headcount for 3 people.

Responsibilities

• Evaluate and process security exceptions, covering documentation, risk assessment and putting compensatory controls in place, while working with several teams so deployments stay secure and vulnerabilities are kept to a minimum.
• Help organise and coordinate internal and external penetration tests, including defining scope, scheduling and communicating with stakeholders.
• Lead the group-wide response to vulnerabilities and compliance issues across the company Group using standard vulnerability scanning and management platforms. Work with every entity, including subsidiary offices, to review non-conformities and track remediation actions closely.
• Monitor actions taken on findings from security assessments and penetration tests, and retest fixes to confirm they work and keep the security baseline strong.
• Help improve the security exception and vulnerability remediation processes by spotting where they can be streamlined or automated.

Requirements

• Have 1 to 3 years of professional experience in cybersecurity, information security or a related field.
• Have a solid grasp of cybersecurity principles, frameworks such as NIST and ISO 27001, and good practice.
• Be familiar with common vulnerability assessment tools and methods.
• Show you can analyse security risks and recommend suitable mitigations.
• Communicate clearly, in writing and out loud, and explain technical topics to audiences with different backgrounds.
• Be organised and detail-oriented.
• English is required.
• Optional: certifications such as CompTIA Security+, CySA+, CEH or an equivalent.
• Optional: experience with GRC (governance, risk and compliance) platforms.
• Optional: experience with vulnerability management platforms in a large enterprise environment.
• Optional: understanding of cybersecurity compliance frameworks such as NIS2, GDPR or sector-specific rules.
• Optional: strong negotiation and persuasion skills.
• Optional: familiarity with scripting languages such as Python or PowerShell for automation.
• Optional: experience with ticketing and project management systems such as JIRA or ServiceNow.
• Optional: experience using or deploying AI agents in cybersecurity settings.
• You should be aware of possible compliance risks and act with integrity, which the company treats as the basis for its success, reputation and sustainable growth.

Conditions

Temporary, agency-based contract.

Flexible working arrangements are supported where possible.

Equal opportunities apply regardless of background, age, gender, disability, sexual orientation or religious belief.

The company will never ask for payment during recruitment; report any impersonation to the company's site.