IT Security Specialist

Tasks

As an IT security specialist at Incore Corporate Services in Madrid, Spain, you will be responsible for the operation, standardization, and documentation of security controls to ensure consistent implementation across on-premises, cloud, and Microsoft 365 environments. You will identify, escalate, and track security risks and deviations, and work closely with colleagues in Switzerland. - Manage and operate internal security controls across on-premises systems, cloud platforms, and Microsoft 365 - Own and operate key security tools, including: - Data Loss Prevention (DLP) - Microsoft Purview (Compliance, Information Protection, DLP) - Microsoft Defender for Cloud Apps (MCAS) - Intune / MDM and endpoint security controls - Zscaler - Defining, consolidating, and documenting security standards, configurations, and processes to ensure: - A single, consistent security baseline - Clear ownership, versioning, and annual review cycles - Defining and maintaining consolidated security processes to improve governance and structured security change implementation - Conducting and coordinating vulnerability management, including assessment, prioritization, remediation tracking, and validation - Identifying, assessing, and escalating security risks across IT operations, the cloud, the workplace, projects, and SOC activities - Detecting and highlighting violations or deviations from approved security standards to ensure remediation or formal risk approval - Supporting cybersecurity incident response, including investigation, remediation, documentation, and closure - Assisting with the preparation of quarterly security documentation and audit evidence

Requirements

- 3–5 years of experience in IT / information security or security operations - Strong hands-on experience with the Microsoft security stack (Purview, DLP, MCAS, Intune/MDM) and cloud-based and on-premises security tools - Experience with zero-trust security architecture - Experience with cloud security - Experience in control-based and audit-driven environments (ISAE 3000, ISO 27001, NIST, CIS) - Structured, documentation-driven approach to work with a strong awareness of risk - Very good English skills; knowledge of German is a plus but not required

Certifications and Training

- Cybersecurity certifications (e.g., CISSP, CISM, CISA, ISO 27001, Microsoft Security) are a strong asset - A relevant academic background (bachelor's or master's degree in computer science, information security, or a related field) is a plus

We offer

We offer an exciting and forward-looking work environment with a wide range of responsibilities, a motivated and supportive team, and a professional workplace. You’ll enjoy attractive working conditions, including a 40-hour workweek, flexible hours, the option to work from home, and five weeks of vacation. Our office is ideally located in Madrid’s main business district (Azca–Bernabéu).