search Browse Jobs
Senior Governance, Risk and Compliance AnalystArup · Madrid, Community of Madrid, Spain
Arup logo

Arup

company page ↗

Senior Governance, Risk and Compliance Analyst

🗓️ Posted 2026-10-14 Madrid, Community of Madrid, Spain Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 3,200 EUR–4,500 EUR/mo

About the Company

A global built environment consultancy We guide, plan and design the future of the built environment. As a global consultancy with extensive technical and advisory expertise, we bring a Total Design approach to our work with our clients. This is how we shape a better world. Design Services Specialties: Structural engineering, Carbon mgmt, Building design, Sustainability consulting, Infrastructure, Civil engineering, Management consulting, Project mgmt, Planning, ITC, Transaction advice, Acoustics, Technical services, Lighting, MEP, Facades, BIM, Fire, Energy, Transport, water, Digital, engineering, Bridges, Aviation, advisory services

Responsibilities

  • ● Joining Arup
  • ● Arup's purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.
  • ● Digital Technology's Cyber GRC (Governance, Risk, and Compliance) team is responsible for ensuring that Arup's cybersecurity practices align with internal policies, industry standards, and regulatory requirements. The team manages cyber risks by developing governance frameworks, assessing threats, implementing controls, monitoring compliance, and supporting audits. Our goal is to reduce security risks while enabling business objectives in a secure and compliant manner
  • ● Watch this short clip to discover how Arup are shaping a better world and how you could be a part of it
  • ● At Arup, you belong to an extraordinary collective - in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas. You will have the opportunity do socially useful work that has meaning - to Arup, to your career, to our members and to the clients and communities we serve.
  • ● Develop, maintain, and test the organisation's IT Disaster Recovery (ITDR) plans
  • ● Conduct regular risk assessments and impact analyses to identify critical systems, dependencies, and recovery priorities.
  • ● Manage global cybersecurity awareness campaigns and training initiatives to strengthen security culture.
  • ● Collaborate with regional digital teams to embed security-by-design principles into projects and products.
  • ● Drive implementation and ongoing compliance with ISO 22301 standards, ensuring the organisation meets global BCM requirements.
  • ● Did you know: Our Digital Technology team are proud prior winners of the IT Team of the Year at the Chartered Institute of IT's UK IT Industry Awards.
  • ● Is this role right for you
  • ● Demonstrate strong skills in IT DR and ISO22301 compliance within a global digital technology environment.
  • ● Have a solid understanding of assessing and enhancing BIA, application dependencies, and engaging key stakeholders in IT DR activities.
  • ● Bring experience in threat and risk assessment.
  • ● Show enthusiasm for cyber awareness and education, with a desire to lead global initiatives that encourage cultural change.
  • ● Value ongoing learning and is motivated to develop further in a supportive, international, and innovative organisation.
  • ● Not ready to apply just yet, or have a few questions Please email [email protected]
  • ● At Arup, we care about each member's success, so we can grow together.
  • ● Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair and equitable pay, we offer a career in which all of our members can belong, grow and thrive - through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.