{"id":3792603,"url":"https://alion.io/job/banco-santander-cybersecurity-manager-ctu","title":"Cybersecurity Manager (CTU)","company":{"id":11879,"name":"Banco Santander","domain":"santander.com","url":"https://alion.io/company/banco-santander","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":114,"ghost_share":0.079,"stale_share":0.518,"repost_share":0.149,"time_to_fill_p50_days":22,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Boadilla del Monte, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-04T00:00:00Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-10T19:16:40Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Cybersecurity Manager (CTU)Country: SpainIT STARTS HERE\nSantander (www.santander.com) is evolving from a global, high-impact brand into a technology-driven organization, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible.\nThis is more than a strategic shift. It’s a chance fordriven professionalsto grow, learn, and make a real difference.\nOur mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management.\nThe Auto Mobility Finance business focuses on products, sales channels and commercial agreements with dealers, vehicle manufacturers or retail distribution establishments, as well as commercial functions associated with direct sales (branches, call centers or digital channels) and indirect sales (through third parties) of consumer finance products.\nTHE DIFFERENCE YOU MAKE\nThe Auto Mobility Finance division is looking for a Manager for the Cybersecurity (CTU) team based in our Boadilla del Monte (Madrid) office.\nWe’re shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:\nTo do oversight the Technical tasks related to Cyber Security for all the Auto mobility finance Units under scope (aprox. 14 entities in 16 countries), and managing directly the CTU unit in SCF HQ, Western Hub and Global Services\nCyber Incidents Management and coordination of SOC escalations.\nSIEM logs ingestion Monitoring and new configuration. Use cases management.\nCyber Infrastructure issues support and change managemetn (FW, WAF, Proxy, Antimalware, Certs, etc)\nAttack Surface management: IFA inventory Maintenance, Ethical Hacking planning and Vulnerability remediation Management\nCloud Security posture monitoring and management.\nHardening Security Compliance for different technologies.\nSecurity Development findings review and lifecycle management.\nCyber Intelligence feeds Monitoring and identification of main threats against SCF.\nWHAT YOU’LL BRING\nOur people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organization. We’re enabling teams to go beyond by valuing who they are and empowering what they bring.\nThe following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nProfessional Experience\nMinimum of 9 years of experience in cybersecurity roles, with progressive responsibility in security operations, incident response, and technical leadership. (Required)\nProven experience leading cybersecurity teams and coordinating cross-functional stakeholders in complex, multi-country environments. (Required)\nStrong background in managing security operations across large, distributed environments, ideally with exposure to financial services or similarly regulated industries. (Preferred)\nExperience overseeing cybersecurity projects, service improvements, and operational priorities in coordination with internal teams and external providers. (Required)\nDemonstrated ability to manage incidents, escalations, and remediation activities from identification through resolution. (Required)\nEducation\nDegree in a STEM-related discipline (Required)\n\nRelevant cybersecurity certifications (Required)\nLanguages\nFluent English and Spanish (Required)\nHard Skills\nStrong hands-on experience in cybersecurity operations, with a focus on Protect, Detect, and Respond capabilities, including related tools, controls, and processes. (Required)\nSolid knowledge of incident management and SOC escalation coordination, including triage, prioritization, containment, and follow-up actions. (Required)\nExperience with SIEM platforms, including log ingestion monitoring, configuration, use case management, tuning, and lifecycle maintenance. (Required)\nProven expertise in cyber infrastructure security, including firewall, WAF, proxy, antimalware, certificate, and related security control management. (Required)\nExperience in attack surface management, including inventory maintenance, ethical hacking coordination, vulnerability tracking, and remediation governance. (Required)\nKnowledge of cloud security posture management, including monitoring, configuration review, and remediation tracking. (Preferred)\nStrong understanding of security hardening and compliance across multiple technologies and environments. (Required)\nExperience reviewing and managing the lifecycle of secure development findings and security issues raised during application or code assessments. (Preferred)\nAbility to monitor cyber intelligence feeds, assess relevance, and identify emerging threats affecting the organization. (Preferred)\nSoft Skills\nTeam management\nProjects management\nFluent communication, and capability to adapt to different levels\nDocumentation and presentation skills\nStrong organization and planification skills\nWorkload management ability\nWE VALUE YOUR IMPACT\nYour contribution matters, and it’s recognized. You can expect a fair, competitive reward package that reflects the impact you create and the value you deliver. But we know rewards go beyond numbers.\nWe’reenable our teams to go beyond through global opportunities and broad career paths.\nFlexibility that works. Enjoy a hybrid working models -some days remote, some days onsite with your team-along with flexible hours.\nLearning for life. Access hundreds of courses on our platforms, including exclusive access to our global learning space: Santander Open Academy (www.santanderopenacademy.com)\nCompetitive rewards. Receive a highly competitive salary with performance-based bonuses, motivating you to keep growing with us.\nFinancial advantages. Benefit frompreferential banking terms, special interest rates on loans, life insurance, and more.\nYour health is our priority. ThroughBeHealthy, our global wellness programme, we promote Holistic wellbeing.\nWe know family is everything. That’s why we offer childcare support and family-friendly programmes tailored to each life stage.\nAlways by your side. Get access to Santander Contigo, our program for employees and their families offering legal, emotional, and administrative advisory services.\nExtra benefits. Gym/WellHub membership, medical centers in some of our facilities, meal subsidy, parking, shuttle service from various points in Madrid, as well as exclusive discounts and offers for Santander employees. And that’s only the beginning-we’ll tell you more when you join!\nWe’re here to keep you motivated, help you reach your goals, and celebrate your progress, every step of the way.\nLOCAL COMPLIANCE\nSantander is proud of being an organization where there are equal opportunities regardless of age, gender, disability, civil status, race, religion or sexual orientation. We are committed to providing an inclusive and accessible application process for all candidates.\nWHAT TO DO NEXT\nIf this sounds like a role you are interested in, then please apply.\nREADY TO TAKE THE NEXT STEP IN YOUR JOURNEY?","description_format":"text","description_chars":7360,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Spanish","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Hybrid work","Life insurance"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Commercial & Retail Banks"],"lifecycle":[{"event":"open","at":"2026-11-05T07:15:58Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":6,"expected_fill_days":22,"reasons":["conf:5","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/banco-santander-cybersecurity-manager-ctu","json_url":"https://alion.io/job/banco-santander-cybersecurity-manager-ctu.json","meta":{"generated_at":"2026-11-10T21:52:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"search","counted_by":"address","units_charged":0,"used_today":0,"day_limit":null,"remaining_today":null,"minute_limit":null,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":11879},"rest":"https://alion.io/mcp/rest/get_company?id=11879"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbanco-santander-cybersecurity-manager-ctu"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbanco-santander-cybersecurity-manager-ctu"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbanco-santander-cybersecurity-manager-ctu"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/banco-santander-cybersecurity-manager-ctu\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbanco-santander-cybersecurity-manager-ctu"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3792603}},{"tool":"search_jobs","arguments":{"company":"santander.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3792603},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}