Técnico GRC

This is a fully remote position, open to applicants in Spain.

📋 Description

• Define, analyze, and manage corporate Information Security requirements for IT and Business.

• Collaborate with IT and Cybersecurity in the implementation and monitoring of security controls.

• Participate in and lead Governance, Risk, and Compliance initiatives.

• Act as a technical liaison with Data Protection.

• Define, analyze, and track KPIs, metrics, and indicators for Information Security.

• Collaborate in the definition, maintenance, and execution of the Security Master Plan and the ISMS.

• Engage in Business Continuity strategies and plans.

• Identify, assess, and manage risks within the Corporate Risk Management Framework.

• Conduct audits and compliance reviews of policies, procedures, and controls of the ISMS.

• Evaluate processes, products, and technical and business services from a security and compliance perspective.

• Prepare executive reports, technical documentation, and improvement proposals.

• Participate in cross-functional GRC, cybersecurity, and risk management initiatives.

⛳️ Requirements

• Minimum of 3 years of experience in Governance, Risk, and Compliance (GRC), Information Security, or Cybersecurity roles.

• Knowledge of frameworks and standards such as ISO 27001, ENS, NIST, and CIS Controls or similar.

• Experience in the implementation, maintenance, and auditing of Information Security Management Systems (ISMS).

• Knowledge in managing and analyzing information security risks.

• Experience in defining and tracking controls, indicators, KPIs, and improvement plans.

• Understanding of GDPR/LOPDGDD.

• Ability to coordinate initiatives with business and technology areas.

• Experience in internal audits and support for external audits.

• Analytical skills, attention to detail, and strong communication abilities.

• Minimum English proficiency of B2.

• Certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISM, CRISC, CISA, or similar are valued.

• Experience in cloud environments: AWS, Azure, or Google Cloud is considered a plus.

• Knowledge of business continuity and disaster recovery plans is advantageous.

• Experience in highly regulated sectors is appreciated.

🏝️ Benefits

• Permanent contract.

• 100% remote work according to the job listing; the heading and location also indicate a hybrid model in Palma de Mallorca.

• Working hours of 8.5 hours from Monday to Thursday and 6.5 hours on Fridays.

• Intensive work schedule of 7 hours in mid-June, July, and August.

• 22 vacation days + 2 discretionary days off.

• Days off on December 24 and 31.

• Option for 12 or 14 pay periods.

• Flexible compensation: restaurant card, childcare vouchers, health insurance, training, and other tax-advantaged benefits.

• Perks club with discounts on technology, leisure, and training.

• Continuous training: Udemy Business, language courses, official certifications, and technical training.

• Career development plan and professional support.

• Programs for nutrition, physical activity, and emotional balance.

• 24/7 personal and family assistance.

• Diverse and multicultural environment.

• Social events to connect with the team.