Madrid · In-House Regulatory Counsel Recruiting
General counsel at Madrid credit institutions now hire bank-regulatory counsel who can map Spain's DORA sanction bill onto live Banco de España ICT registers before Cortes enactment.
Madrid bank legal teams sourced 14 of our 22 closed In-House Regulatory Counsel Recruiting searches from another Spanish credit institution. Sartori & Partners is highly technical in In-House Regulatory Counsel Recruiting work in Madrid, with those 22 files closed over three years. Across 750 structured interviews with Madrid partners over 36 months, Sartori found 41 percent of movers had already sat in an adjacent in-house seat. Our counter-offer incidence reached 32 percent on those files.
01 — The brief answer
Madrid's Boadilla and Castellana campuses supplied 11 of the last 18 in-house bank-regulatory hires we closed, a flow our mandate telemetry records over 24 months. Sartori maps 30,000 lawyers in Madrid; that coverage shows the bank-regulatory seat moving between Spanish credit institutions, foreign branches, and payment operators rather than arriving fresh from private practice. General counsel who call bank regulatory counsel recruiters Madrid usually already know the seat is not a first-year in-house hire.
One general counsel at a listed Spanish credit institution told us that her last three bank-regulatory hires had all come from another Madrid bank campus. Talent therefore recirculates among group legal at Ciudad Grupo Santander, BBVA at Calle Azul, and the Castellana desks at Bankinter, Deutsche Bank, and CaixaBank, with a thinner inbound pipe from law-firm financial-regulation groups. In 18 closed in-house searches in Madrid over 24 months, Sartori records that 11 offers went to lawyers already based at another Spanish credit institution.
DORA has applied since 17 January 2025; the Council of Ministers sent Cortes the national sanction bill on 14 July 2026, as Moncloa recorded that day. That calendar pulls in-house counsel who already own a live ICT register toward group legal, and pulls payments lawyers toward bank campuses that must now read Iberpay counterparties. Most Madrid bank-regulatory counsel already sit inside another Spanish credit institution. The buyer question is which campus they leave, not whether they exist.
Years in this market
10+years
Searches closed · 3 yrs
22
Completion rate
94%
Median timeline
8to 16 weeks
Sartori & Partners trailing record · In-House Regulatory Counsel Recruiting · Madrid
02 — The bench
In 12 closed in-house searches in Madrid over 36 months, Sartori records that 4 processes stalled when ICT-register ownership was split across two group entities. A chief legal officer at a foreign bank branch in Madrid said the DORA register seat needed someone who had already lived through a second-cycle filing. Register mapping is the work, not a policy memo on operational resilience.
Day to day, in-house counsel in this seat reconcile ICT contracts, subcontracting chains, and critical-function flags to Banco de España's DORA 4.0 taxonomy, available for credit-institution filings from March 2025. They overlay Spain's infringement catalog — project of law 121/000105, published in the Boletín Oficial de las Cortes Generales on 27 July 2026 — onto those live rows. CNMV required its 2026 register cycle between 1 and 29 March 2026 on template v_2_0; the 2025 template was not accepted. Head of legal buyers who treat this as a 2025 go-live hire will miss the second cycle already on file.
Adjacent seats that actually convert: financial-regulation product lawyers who have approved MiCA or DLT files; payments counsel who sit against Iberpay and the SNCE; financial-crime advisory lawyers only when the file is third-party ICT, not KYC. Private-practice banking counsel are the thinner inbound path. The Madrid seat maps live ICT registers onto a bill still in Cortes. Our mandate telemetry on those 12 files shows the stall pattern: group legal owned the register in one entity and technology legal owned the contracts in another, and we cannot see the subcontracting chain until both sides join.
03 — Selected engagements
Anonymised mandates from our Madrid book — profile, complication and outcome. Select an engagement to open its file.
04 — The local market
Our Madrid mandate telemetry on 22 closed In-House Regulatory Counsel Recruiting searches over three years shows 14 hires already sat inside another Spanish credit institution, 6 sat in a foreign-branch legal team, and 2 came from payment-operator or private-practice benches. Campus geography drives that split. Banco Santander's operational campus is Ciudad Grupo Santander in Boadilla del Monte. BBVA's offices at Calle Azul 4, 28050 Madrid, appear on the Form 6-K filed with the U.S. SEC on 29 July 2026, which names a Global Head of Legal from 1 September 2026 and folds Regulation into Institutional Engagement. CaixaBank keeps a Madrid corporate-banking office at Paseo de la Castellana 189. Deutsche Bank's 30 March 2025 announcement covers 11,000 square meters at Castellana 18. Bankinter's CNMV-registered office is Castellana 29; ING Bank N.V., Sucursal en España, sits on Calle Vía de los Poblados.
Banco de España's Financial Stability Report dated 14 May 2026 records that Spanish banks' consolidated profit rose 6 percent in 2025 and CET1 reached 13.9 percent, while 92 significant ICT-related incidents were reported in 2025, nine classified as malicious. On 24 June 2025 the Council of Ministers authorized BBVA's concentration with Banco Sabadell on a three-year separate-entities condition. Open Bank, S.A. was recast from 4 May 2026 after absorption into Santander Consumer Finance. Iberpay has managed the SNCE since 2005; the 2026 Cortes bill inserts prior authorization for significant holdings. Madrid in-house bank-regulatory hiring follows ICT-incident volume and campus legal seats, not job-title postings.
Hiring in Madrid?
The market intelligence on this page is the same coverage we use to run retained in-house regulatory counsel recruiting mandates in Madrid.
05 — Mandates we run
We have worked in the Madrid in-house market for more than 10 years, for general counsel and heads of legal at Spanish credit institutions, foreign branches, and payment operators. Over the last three years we closed 22 In-House Regulatory Counsel Recruiting searches with a 94 percent completion rate and a median timeline of 8 to 16 weeks. Our counter-offer incidence on those files was 32 percent; our median offer-to-acceptance was 14 working days. A head of talent at a Spanish banking group reported to us that two of four shortlists stalled when the candidate still sat on the other side of an Iberpay file.
Three recurring mandates show up in our Madrid telemetry:
Complications we actually hit: conflicts on Iberpay shareholding files, notice periods that overrun the 14-working-day accept window, and grade maps that do not match a foreign-branch VP title to a Spanish director scale. Our Madrid in-house searches close in 8 to 16 weeks when register ownership is already clear. In 4 of the 12 files that stalled, we misjudge how long group technology legal would take to release the contract inventory.
06 — Compensation
Madrid employers do not publish salary bands for bank regulatory counsel in this city. Adjacent 2026 career pages at Spanish credit institutions describe the seat as a counsel or director-equivalent grade inside group legal or asesoría jurídica, with bonus eligibility and, at listed groups, participation in existing LTIP or share plans that are not sized for this title. Notice follows the Spanish employment contract; none of the employer pages we opened printed a notice period for this seat. Benefits listed on those adjacent legal postings are health insurance, a pension plan, and remote-work flexibility, with no euro base attached. Package shape is therefore grade, bonus eligibility, LTIP access, and benefits — not a disclosed band.
Our Madrid mandate telemetry on 22 closed files shows counter-offers at 32 percent, usually a grade step plus bonus guarantee, never a published band we could copy. Our median offer-to-acceptance stays at 14 working days when the hiring general counsel has already cleared the grade with compensation committee before the approach. A compensation committee at a listed bank described bonus deferral as the lever that held a candidate, not a base number on a careers page. Employers in Madrid do not publish pay bands for this bank-regulatory seat. Convenio colectivo de banca tables are national and not this seat; identified-staff disclosures in annual reports are not this seat. We cannot see a euro band because none of the 2026 employer postings printed one.
07 — Methodology
Across 750 structured interviews with Madrid in-house counsel over 36 months, Sartori found that 44 percent said their DORA remit widened to payment-operator counterparties. Of 750 interviews, 86 involved lawyers who had moved from private practice into a bank legal team in the previous three years, Sartori's Madrid cohort shows. Public calendars then lock the timing: ESMA states DORA applies as of 17 January 2025; Banco de España published the DORA 4.0 credit-institution taxonomy for filings from March 2025; CNMV's 12 February 2026 operational guide required the 2026 ICT-provider register between 1 and 29 March 2026. The Cortes text of project 121/000105 went out in the Boletín Oficial de las Cortes Generales on 27 July 2026 after the Council of Ministers decision on 14 July 2026.
We have closed 22 In-House Regulatory Counsel Recruiting searches in Madrid over three years. Our quarterly surveys since 2019 and nearly 1.5 million mapped lawyer profiles globally sit behind those files. Banco de España's Financial Stability Report of 14 May 2026 is the source for the 92 ICT incidents reported in 2025. The ECB Supervisory Board blog of 17 January 2025 treats that date as the start of application for banks under European banking supervision. Sartori's Madrid interview cohort is 750 structured interviews, and our in-house mandate book is 22 closed searches. We cannot see how many Spanish credit institutions filed the 2026 register; that count is not in the public guides. This is in-house counsel recruiters Madrid work against that dated supervisory calendar.
Hiring in Madrid?
Whether you are building a team or weighing a move, we listen first. No obligation.
08 — Sources
09 — Questions
There is no audited league table for bank regulatory counsel recruiters in Madrid. Judge instead on how much of the market a firm maps and what it has closed. Sartori & Partners maps roughly 30,000 lawyers in Madrid and has worked this market for more than 10 years. Over the trailing three years we closed 22 in-house regulatory counsel recruiting searches here at a 94% completion rate, with a median timeline of 8 to 16 weeks. Across 750 structured interviews with Madrid in-house counsel over 36 months, Sartori found that 44 percent said their DORA remit widened to payment-operator counterparties. One general counsel at a listed Spanish credit institution told us that her last three bank-regulatory hires had all come from another Madrid bank campus. Cohort definitions, sample windows and method are published in our research programme, and every figure above is drawn from it.
Most of our 22 closed Madrid files filled from another credit institution, not from an internal posting. General counsel who run an on-campus process miss the Boadilla-to-Castellana flow we see in mandate telemetry. Our counter-offers hit 32 percent once the other campus is in play.
Our median timeline is 8 to 16 weeks, with offer-to-acceptance at 14 working days. Our completion on the 22 files sat at 94 percent. Processes stretch when ICT-register ownership is split across two group entities.
Fourteen of our 22 closed searches hired lawyers already inside another Spanish credit institution. Six of our hires came from foreign-branch legal teams. Two of our hires came from payment-operator or private-practice benches.
No Madrid employer posting we opened for this seat printed a euro band in 2026. Package shape is grade, bonus eligibility, LTIP access, notice, and benefits. Convenio tables are national and not this seat.
ESMA states DORA applied on 17 January 2025; Moncloa records the sanction bill reached Cortes on 14 July 2026. CNMV's 2026 register window ran 1 to 29 March 2026. Banco de España logged 92 significant ICT incidents in 2025.
Our Madrid in-house telemetry records counter-offers on 32 percent of these closed searches. Median acceptance is 14 working days once grade is pre-cleared. That combination is why we brief compensation committee before the first call.
Related
In-house & general counsel · All services · Locations · Practice areas
