Information & Blockchain Security Specialist

Excited to grow your career?

BBVA is a global company with more than 160 years of history that operates in more than 25 countries where we serve more than 80 million customers. We are more than 121,000 professionals working in multidisciplinary teams with profiles as diverse as financiers, legal experts, data scientists, developers, engineers and designers.

AtBBVAwe are leading the transformation of banking worldwide, united in pursuing our goal of supporting your drive to go further. Firmly focused on the future, our on-going digital transformation is already producing disruptive innovations that power our vision of banking. Building on 160 years of history we know the importance of constant development, which is why we place so much confidence in the collaborative working environment that enables our people to grow and excel.

For over 50 years,BBVA in Switzerland has been helping clients manage their wealth with a global outlook, Swiss precision, and a philosophy that blends tradition with innovation. From Zurich to the world, we provide tailored solutions for those who value both strategy and trust.

Yet, our greatest strength lies in our people: an international, diverse, and highly skilled team that combines financial expertise with a digital mindset and innovative spirit. Continuous learning, cross-cultural collaboration, and career growth that makes a real impact in our clients’ lives drive everything we do, shaping both the way we work and the opportunities we create for our team.

JoiningBBVA in Switzerland means being part of a global bank, working on pioneering projects in private and digital banking, and growing within a culture that listens, evolves, and strives to make a difference.

BBVAis a Spanish bank with its Swiss offices located in Zürich.

About the job:

We are looking for anInformation & Blockchain Security Specialist to join BBVA, combining responsibilities acrossInformation Security and theoversight and change management of our crypto custody service.

This is a role at the intersection of cybersecurity, cloud technology and digital assets. The successful candidate will work closely within the Security & Technology team and will contribute to ensuring that our technology and crypto custody environments operate securely, reliably and in line with BBVA's security standards.

The role doesnot require deep blockchain development expertise. However, candidates should understand how public blockchain networks operate, particularlyBitcoin and Ethereum, and be comfortable working with technical teams and third-party service providers in a regulated financial-services environment.

Functions (duties and responsibilities):

• Support the implementation, operation and continuous improvement ofinformation security controls, with particular focus on cloud environments.
• Contribute to the security oversight ofMicrosoft Azure services and architectures.
• Support activities related toinformation protection, data security and cryptographic controls.
• Assess security requirements and risks associated with new solutions, services and technology changes.
• Participate in security reviews and contribute to the definition and monitoring of remediation actions.
• Work with technology, security and business stakeholders to ensure appropriate security controls throughout the service lifecycle.
• Contribute to the management of security risks associated with external and third-party technology providers.
• Support thetechnical and security oversight of BBVA's Crypto Custody service.
• Coordinate and supervisechanges affecting the Crypto Custody platform and service, including assessment of their security and operational implications.
• Act as a technical counterpart to thethird-party provider responsible for the custody technology, challenging and validating proposed changes when appropriate.
• Understand and assess the impact of changes to the blockchain protocols and networks supported by the service, with particular focus onBitcoin and Ethereum.
• Participate in the analysis of incidents, vulnerabilities, protocol changes and other technical events that may affect the custody service.
• Support the assessment and monitoring of security controls associated with crypto-asset custody, including areas such askey management, cryptography, transaction security, access management and operational resilience.
• Facilitate coordination between Security, Technology teams, external providers and other stakeholders involved in the Crypto Custody service.
• Document Policies, Norms, and Procedures and participate in the definition on the procedures associated with physical and technological security.

Your profile:

Required experience and knowledge

• Professional experience inInformation Security, Cybersecurity, Technology Risk or a related technical field.
• Good understanding of security principles and controls incloud environments, preferablyMicrosoft Azure.
• Knowledge ofinformation protection, encryption, cryptography, identity/access controls and data security.
• Understanding of blockchain fundamentals and how decentralized blockchain networks operate.
• Knowledge ofBitcoin and Ethereum, including concepts such as transactions, addresses, wallets, private/public keys, digital signatures, network validation and transaction finality.
• Ability to understand technical architectures and evaluate security implications without necessarily being a software developer.
• Experience working withthird-party technology providers, including technical oversight, change management, risk assessment or service management.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Professional working proficiency inEnglish.

Nice to have

• Hands-on experience withMicrosoft Azure security services and controls.
• Experience withMicrosoft Purview, Key Vault, HSMs, key management, or other information-protection technologies.
• Knowledge of cryptographic key lifecycle management,post-quantum cryptography and secure key custody.
• Previous exposure todigital assets, crypto custody, blockchain infrastructure or financial-market technology.
• Understanding of security considerations associated with wallets, signing processes, blockchain transactions and digital-asset custody models.
• Experience inbanking, financial services or another highly regulated environment.
• Familiarity with cybersecurity and technology-risk frameworks and regulatory requirements applicable to financial institutions.
• Knowledge of quantum computing effects and cryptography related issues, is a plus.
• Relevant security or cloud certifications would be an advantage.
  

We are looking for someone with asecurity-first mindset who is also curious about emerging technologies.

You do not need to be a blockchain developer or a crypto specialist. You should, however, be able to understand how Bitcoin and Ethereum work at a technical level, identify the security implications of changes to these technologies, and engage confidently with specialists and external providers.

The ideal candidate combinesinformation security expertise, technical judgement and strong stakeholder-management skills, and is comfortable operating at the intersection of traditional banking technology and digital assets.

Skills: