Senior GRC Analyst

This is a fully remote position, open to applicants in Spain.

📋 Description

• Take ownership and lead the implementation of the company’s Governance, Risk, and Compliance (GRC) initiatives in alignment with ISO 27001 and GDPR.

• Create and oversee the Information Security Management System (ISMS) in accordance with ISO 27001 standards.

• Guarantee GDPR compliance for all data processing operations, which includes data mapping, addressing data leaks, and implementing encryption measures.

• Serve as the main liaison for auditors and prepare the organization for ISO audits.

• Identify compliance deficiencies and facilitate remediation plans in collaboration with both technical and non-technical teams.

• Formulate governance policies, procedures, and frameworks for risk management.

• Collaborate closely with Engineering and Security teams to integrate controls into systems and software development lifecycle (SDLC) processes.

• Keep abreast of regulatory and compliance updates and convert them into actionable requirements.

⛳️ Requirements

• A minimum of 8 years of experience in Governance, Risk, Compliance, or IT Audit roles.

• At least 5 years of substantial hands-on experience with ISO 27001 and experience in managing or supporting ISMS implementation.

• A minimum of 3 years of practical experience with GDPR data mapping, including system reviews from a technological perspective.

• Over 5 years of experience in a product technology company with a global client base in the US and EU (organizations with more than 100 employees).

• Experience collaborating with both internal and external auditors.

• Excellent stakeholder management and communication skills, effectively engaging with both technical and non-technical teams.

• Proficiency in English.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and growth.

• Flexible working arrangements to promote work-life balance.

• Collaborative and inclusive company culture.