Cybersecurity Operations Risk Analyst

About the role

EBA CLEARING is seeking a Cybersecurity Operations Risk Analyst to strengthen the security of its pan‑European payment infrastructure. You will work within an ISO‑27001 certified team, collaborating with internal stakeholders and external security partners.

Key responsibilities

• Plan and coordinate penetration testing with ethical‑hacking firms.
• Create and maintain ISO‑27001 certification and accreditation documentation.
• Assist in implementing firewalls and other security measures, and monitor networks alongside third‑party providers.
• Assess security impact of system updates and new technologies.
• Identify vulnerabilities in IT systems, recommend improvements, and document upgrades.
• Provide security guidance to users and explain potential threats.
• Coordinate tests on applications, network devices, and cloud infrastructures.
• Design and execute simulated social‑engineering attacks.
• Research attack vectors, develop penetration‑testing methodologies, and automate testing techniques.
• Review code for security flaws, reverse‑engineer malware or spam, and produce technical and executive reports.
• Validate security improvements through additional testing and communicate findings to technical and executive audiences.

Required profile

• Bachelor’s degree in Computer Science, Engineering, or equivalent experience.
• Minimum 3 years of relevant experience, preferably in European transaction banking.
• Fluent written and spoken English; additional European language is a plus.
• Strong analytical mindset, high attention to detail, and ability to prioritize security risks.
• Excellent intercultural communication and a 24/7 customer‑first attitude.

Required skills

• Penetration testing
• ISO 27001 standards
• Firewalls and network monitoring
• Vulnerability assessment
• Code review for security flaws
• Reverse engineering of malware
• Automation of security testing
• MS Office (Word, Excel, PowerPoint)