Cybersecurity Manager (CTU)
Santander is hiring a Cybersecurity Manager (CTU). Level rates it ; you can apply on Santander.
Level's read on this job
- Level rates this cybersecurity role Little AI ●○○○: aI is not part of the work.
- Level classifies it as a senior role.
- Level lists 972 other open roles at Santander.
- The role was posted in the last few days.
AI in this role
IT STARTS HERE
Santander (www.santander.com) is evolving from a global, high-impact brand into a technology-driven organization, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible.
This is more than a strategic shift. It’s a chance for driven professionals to grow, learn, and make a real difference.
Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management.
The Auto Mobility Finance business focuses on products, sales channels and commercial agreements with dealers, vehicle manufacturers or retail distribution establishments, as well as commercial functions associated with direct sales (branches, call centers or digital channels) and indirect sales (through third parties) of consumer finance products.
THE DIFFERENCE YOU MAKE
The Auto Mobility Finance division is looking for a Manager for the Cybersecurity (CTU) team based in our Boadilla del Monte (Madrid) office.
We’re shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:
- To do oversight the Technical tasks related to Cyber Security for all the Auto mobility finance Units under scope (aprox. 14 entities in 16 countries), and managing directly the CTU unit in SCF HQ, Western Hub and Global Services
- Cyber Incidents Management and coordination of SOC escalations.
- SIEM logs ingestion Monitoring and new configuration. Use cases management.
- Cyber Infrastructure issues support and change managemetn (FW, WAF, Proxy, Antimalware, Certs, etc)
- Attack Surface management: IFA inventory Maintenance, Ethical Hacking planning and Vulnerability remediation Management
- Cloud Security posture monitoring and management.
- Hardening Security Compliance for different technologies.
- Security Development findings review and lifecycle management.
- Cyber Intelligence feeds Monitoring and identification of main threats against SCF.
WHAT YOU’LL BRING
Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organization. We’re enabling teams to go beyond by valuing who they are and empowering what they bring.
The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Professional Experience
- Minimum of 9 years of experience in cybersecurity roles, with progressive responsibility in security operations, incident response, and technical leadership. (Required)
- Proven experience leading cybersecurity teams and coordinating cross-functional stakeholders in complex, multi-country environments. (Required)
- Strong background in managing security operations across large, distributed environments, ideally with exposure to financial services or similarly regulated industries. (Preferred)
- Experience overseeing cybersecurity projects, service improvements, and operational priorities in coordination with internal teams and external providers. (Required)
- Demonstrated ability to manage incidents, escalations, and remediation activities from identification through resolution. (Required)
Education
Degree in a STEM-related discipline (Required)
- Relevant cybersecurity certifications (Required)
Languages
- Fluent English and Spanish (Required)
Hard Skills
- Strong hands-on experience in cybersecurity operations, with a focus on Protect, Detect, and Respond capabilities, including related tools, controls, and processes. (Required)
- Solid knowledge of incident management and SOC escalation coordination, including triage, prioritization, containment, and follow-up actions. (Required)
- Experience with SIEM platforms, including log ingestion monitoring, configuration, use case management, tuning, and lifecycle maintenance. (Required)
- Proven expertise in cyber infrastructure security, including firewall, WAF, proxy, antimalware, certificate, and related security control management. (Required)
- Experience in attack surface management, including inventory maintenance, ethical hacking coordination, vulnerability tracking, and remediation governance. (Required)
- Knowledge of cloud security posture management, including monitoring, configuration review, and remediation tracking. (Preferred)
- Strong understanding of security hardening and compliance across multiple technologies and environments. (Required)
- Experience reviewing and managing the lifecycle of secure development findings and security issues raised during application or code assessments. (Preferred)
- Ability to monitor cyber intelligence feeds, assess relevance, and identify emerging threats affecting the organization. (Preferred)
Soft Skills
- Team management
- Projects management
- Fluent communication, and capability to adapt to different levels
- Documentation and presentation skills
- Strong organization and planification skills
- Workload management ability
WE VALUE YOUR IMPACT
Your contribution matters, and it’s recognized. You can expect a fair, competitive reward package that reflects the impact you create and the value you deliver. But we know rewards go beyond numbers.
- We’re enable our teams to go beyond through global opportunities and broad career paths.
- Flexibility that works. Enjoy a hybrid working models—some days remote, some days onsite with your team—along with flexible hours.
- Learning for life. Access hundreds of courses on our platforms, including exclusive access to our global learning space: Santander Open Academy (www.santanderopenacademy.com)
- Competitive rewards. Receive a highly competitive salary with performance-based bonuses, motivating you to keep growing with us.
- Financial advantages. Benefit from preferential banking terms, special interest rates on loans, life insurance, and more.
- Your health is our priority. Through BeHealthy, our global wellness programme, we promote Holistic wellbeing.
- We know family is everything. That’s why we offer childcare support and family-friendly programmes tailored to each life stage.
- Always by your side. Get access to Santander Contigo, our program for employees and their families offering legal, emotional, and administrative advisory services.
- Extra benefits. Gym/WellHub membership, medical centers in some of our facilities, meal subsidy, parking, shuttle service from various points in Madrid, as well as exclusive discounts and offers for Santander employees. And that’s only the beginning—we’ll tell you more when you join!
We’re here to keep you motivated, help you reach your goals, and celebrate your progress, every step of the way.
LOCAL COMPLIANCE
Santander is proud of being an organization where there are equal opportunities regardless of age, gender, disability, civil status, race, religion or sexual orientation. We are committed to providing an inclusive and accessible application process for all candidates.
WHAT TO DO NEXT
If this sounds like a role you are interested in, then please apply.
READY TO TAKE THE NEXT STEP IN YOUR JOURNEY?
How we rate this
Cybersecurity Manager (CTU) at Santander rates 38 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Also common in cybersecurity jobs at this level
Pay
- Typical cybersecurity job
- $159k
This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs
Want an expert to read your CV for this job?
Free. Send your CV and the role you want next. You get your review by email within 24 hours.
Get new cybersecurity jobs by email
One email a week with the new cybersecurity jobs, each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free. One email a week. Unsubscribe in one click.
Similar roles
Security roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step