Global Cyber Incident Coordinator - Santander

  • Monte
  • Banco Santander S.a.

Global Cyber Incident Coordinator - Santander Digital Services

Country: Spain


SANTANDER DIGITAL SERVICES is looking for a Global Cyber Incident Coordinator, based in our Boadilla del Monte office.


Santander Digital Services (SDS) is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over 7,000 people in 8 countries (Spain, Portugal, Poland, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms.

Santander is proud of being an organization where there are equal opportunities regardless of gender identity, culture and disability. Our mission is to contribute to help more people and business prosper. We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.


As a Global Cyber incident Coordinator **, you will provide specialized services to help entities to identify, manage and investigate cyber threats and incidents.

We need somebody like you to help us in different fronts:

  • Manage complex cyber security incidents globally across the group. Own the incidents. Become part of a world class capability that will own, respond and coordinate significant incidents ensuring successful resolution and adopting lessons learnt to increase the cyber resilience of Santander.
  • Orchestrate the necessary human and technology resources for the resolution of high impact cyberincidents
  • Design and supervise an organized approach to addressing and managing the aftermath of a security breach or cyberattack in order to limit damage on internal systems, data, and networks and reduce recovery time and costs.
  • Drive continuous improvement in Santander´s cyber response capability through the delivery of a cyber readiness programme across the Global Cyber Respond Team.
  • Review and coordinate projects related with the development and improvement of Incident Response plans, policies, and procedures ensuring a consistent, professional and disciplined approach.
  • Design and execute focused development plans for specific priority entities, addressing gaps in capability through innovative training solutions.
  • Contribute to the establishment of a strong and collaborative Global Community between Cyber Threat Units.
  • Collaborate with key stakeholders within the bank, such as Global Forensics, Global Security Operations Centre, Corporate Security & Intelligence, Global Cyber Fraud, Global Legal, Secure User Experience team, among others.
  • Be available to participate in the incident response procedure in 24x7 basis, 8/hour shifts, and On-Call scheme.


  • 3+ years of experience in Cybersecurity Incident Response.
  • Experience in crisis management.


  • Technical degree or Computing Modules.



  • Knowledge of Incident Response and Handling methodologies - Experienced level.
  • Knowledge of cyber incident categories, incident response, and timelines for responses.
  • Knowledge of cyber defense and information security procedures and regulations.
  • Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
  • Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
  • High level of English.


  • Desired one or more of the following certifications (CISSP, CISA, CISM, CEH, OSCP, GCIH).
  • Experience in the financial/banking industry.

Idiomas :

  • Spanish