GRC Senior Specialist – Ciberseguridad

This is a fully remote position, open to applicants in Spain.

📋 Description

• Definition and analysis of information security requirements for IT and business.

• Collaboration with IT and Cybersecurity teams in the implementation of controls.

• Leadership and support in Governance, Risk, and Compliance (GRC) processes.

• Liaison with Data Protection areas (GDPR).

• Definition and monitoring of security KPIs and OKRs.

• Participation in the Security Master Plan and Information Security Management System (ISMS).

• Management and evolution of the Corporate Risk Framework.

• Execution of compliance audits (ISO, ENS, etc.).

• Evaluation of processes, products, and services from a security perspective.

• Cross-functional participation in cybersecurity and compliance initiatives.

⛳️ Requirements

• Solid experience (minimum 5–7 years) in GRC / Information Security.

• Experience in the implementation and maintenance of ISMS (ISO 27001).

• Internal and external audits experience.

• Analysis and management of IT risks.

• Knowledge of regulations and standards: ISO 27001 / ISO 27002, NIST, ENS, and other regulatory frameworks (PCI-DSS, NIS2, DORA...).

• Technical knowledge of IT environments, systems, and security mechanisms.

• Project management experience.

• English level B2 or higher (valued).

🏝️ Benefits

• Permanent contract.

• 100% remote work.

• Internal training and access to certifications.

• Flexible compensation plan (medical insurance, transportation, childcare vouchers, meal vouchers).

• Brand ambassador through our referral program—recommend your friends and earn extra rewards!

• Events, meetups, tech days, talks... and much more!

• 26 days of leave (22 vacation days, 2 days of discretionary leave, and December 24 and 31 as holidays by default).

• Working hours: Monday to Thursday from 8:30 AM to 6 PM (flexible), and Friday from 8 AM to 3 PM, with intensive summer hours in July and August from 8 AM to 3 PM.