The Basque Cybersecurity Agency has modified its list of job positions.

The Basque Cybersecurity Agency (Cyberzaintza) has modified its job position list, to formalize the position of Head of the Risk Governance Division. The Resolution of August 3, 2026 of the Director General of the Basque Cybersecurity Agency has ordered the publication of the change in the Official Gazette of the Basque Country (BOPV, issue No. 155, August 17, 2026). The decision was approved on July 29, 2026 at a meeting held by the Agency’s Council.

What the change consists of

The Basque Cybersecurity Agency (Cyberzaintza) has modified its staff job position list, mainly to manage processes for hiring private staff and employment positions in the digital sector. Through this change, the Agency has created a position: Head of the Risk Governance Division (CL10008), headquartered in Vitoria-Gasteiz, under the Cyberzaintza (Miñano) office. This position will be filled by a transfer competition.

Legal basis

• Law 7/2023, of June 29, 2026, created the Basque Cybersecurity Agency (Cyberzaintza) as a public entity under private law, to promote and coordinate cybersecurity in the Basque Country’s public sector. The Agency’s purpose is to ensure the security of information systems and electronic networks, protecting the digital development of Basque society and businesses.
• Decree 34/2024, of March 19, 2026, approved the Agency’s statutes. Article 17.3 stipulates that the Director General is responsible for calling, managing, and resolving recruitment processes, in accordance with the provisions of the Basque Public Employment Law.
• The Council of the Basque Cybersecurity Agency approved the modification of the job position list on July 29, 2026.

Head of the Risk Governance Division

According to the information contained in the Annex, the created position has the following characteristics:

• Code: CL10008
• Title: Head of the Risk Governance Division (Jefatura de División de Gobierno del Riesgo)
• Filling method: Transfer competition (LL)
• Headquarters: Vitoria-Gasteiz
• Office: Cyberzaintza (Miñano)
• Qualification: Bachelor’s degree or Degree
• Special characteristics: Experience in similar roles (685) and Cyberzaintza’s collective bargaining agreement (01225)
• Basque language requirement: Level 3 (certified)

Appeals and effects

Appeals may be filed against the Agreement approved by the Council of the Basque Cybersecurity Agency on July 29, 2026:

• Appeal to the Council (recurso de reposición): one-month period, starting from the day following its publication.
• Contentious-administrative appeal: two-month period, to be filed with the Vitoria-Gasteiz Contentious-Administrative Court.

The Resolution takes effect one day after its publication, i.e., from August 18, 2026.

Impact and context

This change reflects the Basque Cybersecurity Agency’s organic growth and its growing importance in the digital security of the Basque Country. The position of Head of the Risk Governance Division shows that the Agency recognizes the structural need to manage increasingly complex cyber threats, and it streamlines public employee hiring processes to attract talent specialized in this area.

Source: Official Gazette of the Basque Country, No. 155, August 17, 2026, Section I (official reference: 2026/3627).