IT Security Specialist
As an IT Security Specialist at Incore Corporate Services in Madrid (Spain), you will be responsible for operating, standardizing, and documenting security controls to ensure consistent implementation across on‑premises, cloud, and Microsoft 365 environments. You will identify, escalate, and track security risks and deviations, working in close collaboration with colleagues in Switzerland.
Key responsibilities:
- Execute and operate internal security controls across on-premises systems, cloud platforms, and Microsoft 365
- Own and operate key security tooling, including:
- Data Loss Prevention (DLP)
- Microsoft Purview (Compliance, Information Protection, DLP)
- Microsoft Defender for Cloud Apps (MCAS)
- Intune / MDM and endpoint security controls
- Zscaler
- Define, consolidate, and document security standards, configurations, and processes, ensuring:
- a single, consistent security baseline
- clear ownership, versioning, and annual review cycles
- Define and maintain consolidated security processes to improve governance and structured security change implementation
- Perform and coordinate vulnerability management, including assessment, prioritization, remediation tracking, and validation
- Identify, assess, and escalate security risks across IT operations, cloud, workplace, projects, and SOC activities
- Detect and highlight violations or deviations from approved security standards, ensuring remediation or formal risk acceptance
- Support cybersecurity incident response, including investigation, remediation follow-up, documentation, and closure
- Help Prepare quarterly security documentation and audit evidenceExecute and operate internal security controls across on-premises systems, cloud platforms, and Microsoft 365
- Help Execute evidence and maintain ISAE 3000 security controls and support audit activities.
Required Profile:
- 3–5 years of experience in IT / Information Security or Security Operations
- Strong hands-on experience with Microsoft security stack (Purview, DLP, MCAS, Intune/MDM) and cloud/on-prem security tools
- Experience with Zero trust security architecture
- Experience with Cloud Security
- Experience in control-based and audit-driven environments (ISAE 3000, ISO 27001, NIST, CIS)
- Structured, documentation-driven working style with strong risk awareness
- Very good English skills; German knowledge is beneficial but optional.
Certifications and education (plus):
- Cybersecurity certifications (e.g. CISSP, CISM, CISA, ISO 27001, Microsoft Security) are a strong plus
- Relevant academic background (Bachelor’s or Master’s in Computer Science, Information Security, or related field) is a plus
What we offer
We offer you an exciting and future‑oriented working environment with a wide range of responsibilities, a motivated and supportive team, and a professional workplace. You will benefit from attractive employment conditions such as a 40‑hour work week, flexible working hours, home‑office options, and five weeks of vacation. Our office is ideally located in the main business district of Madrid (Azca – Bernabéu).
If you are interested in being part of our success story, we look forward to hearing from you.
Please send your complete application to:
javier.escribano@incoreservices.es.
About us
For more than 30 years, Incore Technology has been a trusted partner for small and medium‑sized banks in implementing the Finnova core banking solution, the web‑based portfolio management system MyWebDepot (MWD), and various BI solutions.
As part of our outsourcing services, we operate, manage, and host the implemented end‑to‑end solutions, including all required technical and application‑related client and server systems. Through this comprehensive service offering, we enable our clients to pursue and achieve a complete zero‑IT strategy.