Especialista Técnico, GRC

This is a fully remote position, open to applicants in Spain.

📋 Description

• Definition and analysis of corporate IT and Business information system requirements

• Collaboration with IT and Cyber teams in the implementation of Security controls

• Support and leadership in Governance and Compliance processes

• Technical interface with the Data Protection area

• Analysis of KPIs and OKRs related to Information Security

• Collaboration on the Security Master Plan and the execution of the ISMS

• Effective strategy and definition of Business Continuity plans

• Active participation in the Corporate Risk Management Framework

• Audit of compliance with ISMS policies and procedures

• Audit of technical processes, products, and business services

• Critical and constructive cross-functional participation in GRC and Cyber areas

⛳️ Requirements

• Solid and demonstrable knowledge and experience in standards/certifications such as NIST, ISO 27001, PCI-DSS, NIS2, DORA, ENS

• Strong communication skills, assertiveness, proactivity, and autonomy

• Broad and practical knowledge of IT tools, systems, technologies, and their security mechanisms

• Certifications such as CISA, CISM, CISSP, or similar

• Experience in project management

• Desirable proficiency in English at B2 level or higher

• Experience in the Travel and Hospitality sectors is positively regarded

• Practical knowledge and experience in cybersecurity tasks

• Understanding of Scrum/Agile methodologies

• Previous experience in first and second-party audits

• Degree in Computer Engineering/Telecommunications and/or Master's in Cybersecurity

🏝️ Benefits

• Remote work

• Summer working hours

• Possibilities of health insurance

• Continuous training

• Professional development

• Attractive projects

• A young and creative workspace

• Enjoyable New Year's Eve and Christmas Eve

• Referral program