IT Security Specialist (100%)

As an IT Security Specialist at Incore Corporate Services in Madrid (Spain), you will be responsible for operating, standardizing, and documenting security controls to ensure consistent implementation across on‑premises, cloud, and Microsoft 365 environments. You will identify, escalator, and track security risks and deviations, working in close collaboration with colleagues in Switzerland.

Key responsibilities

• Execute and operate internal security controls across on-premises systems, cloud platforms, and Microsoft 365
• Own and operate key security tooling, including:
  • Data Loss Prevention (DLP)
  • Microsoft Purview (Compliance, Information Protection, DLP)
  • Microsoft Defender for Cloud Apps (MCAS)
  • Intune / MDM and endpoint security controls
  • Zscaler
• Define, consolidate, and document security standards, configurations, and processes, ensuring:
  • a single, consistent security baseline
  • clear ownership, versioning, and annual review cycles
• Define and maintain consolidated security processes to improve governance and structured security change implementation
• Perform and coordinate vulnerability management, including assessment, prioritization, remediation tracking, and validation
• Identify, assess, and escalate security risks across IT operations, cloud, workplace, projects, and SOC activities
• Detect and highlight violations or deviations from approved security standards, ensuring remediation or formal risk acceptance
• Support cybersecurity incident response, including investigation, remediation follow-up, documentation, and closure
• Help Prepare quarterly security documentation and audit evidence
• Help Execute evidence and maintain ISAE 3000 security controls and support audit activities.

Required Profile

• 3–5 years of experience in IT / Information Security or Security Operations
• Strong hands‑on experience with Microsoft security stack (Purview, DLP, MCAS, Intune/MDM) and cloud/on‑prem security tools
• Experience with Zero trust security architecture
• Experience with Cloud Security
• Experience in control‑based and audit‑driven environments (ISAE 3000, ISO 27001, NIST, CIS)
• Structured, documentation‑driven working style with strong risk awareness
• Very good English skills; German knowledge is beneficial but optional.

Certifications and education (plus)

• Cybersecurity certifications (e.g. CISSP, CISM, CISA, ISO 27001, Microsoft Security) are a strong plus
• Relevant academic background (Bachelor’s or Master’s in Computer Science, Information Security, or related field) is a plus

What we offer

We offer an exciting and future‑oriented working environment with a wide range of responsibilities, a motivated and supportive team, and a professional workplace. You will benefit from attractive employment conditions such as a 40‑hour work week, flexible working hours, home‑office options, and five weeks of vacation. Our office is ideally located in the main business district of Madrid (Azca – Bernabéu).

We look forward to hearing from you if you wish to be part of our success story.