The English-language job board for Spain

GRC Consultant Madrid

Hybrid in Madrid·Full-time·Added yesterday (last checked 6 Nov)

Advens

4 open roles

Apply

Our summary

Work mode: Hybrid, Madrid
Contract: Full-time
Benefits: Private health insurance, flexible pay plan, meal vouchers

Visa options

The ad doesn’t mention sponsorship
Not a refusal, but not a yes. Worth asking in your first message.

Find jobs with visa support

Skills

Invoicing

This job advert was originally written in Spanish.

Requirements

What we're looking for

At least 3 years of experience in GRC consulting.

Degree in Computer Engineering, Telecommunications Engineering, Cybersecurity, or similar.

Pay & benefits

What you'll get

Work in an international company with more than 600 employees and 25 years of experience in the cybersecurity sector.
Opportunity to learn and develop in a booming sector such as cybersecurity.
A hybrid and flexible working model, where you decide when to come to the office and when to work from home.
Be part of a company with a young atmosphere and values of camaraderie, teamwork, and commitment to society and the environment.
Training and professional development plans.
Company-funded medical insurance.
Flexible compensation plan that includes meal vouchers, public transport, childcare, training, among other benefits.
Mobile phone bill reimbursement.

The role

We are looking for a GRC Consultant located in Madrid with at least 3 years of experience to join our specialized team in governance, risk, compliance, and resilience.

You will participate in regulatory transformation, risk management, and cybersecurity projects for different sectors, including organizations subject to high regulatory requirements.

You will work with some of the main European and international regulations and standards, helping our clients strengthen their operational resilience and risk management capabilities.

What you'll do

Participate in regulatory compliance and regulatory adequacy projects.
Perform technological, cybersecurity, and third-party risk analyses.
Execute GAP analyses against regulatory frameworks and international standards.
Develop policies, procedures, methodologies, and control frameworks.
Design and implement ICT risk management processes.
Collaborate on operational resilience and business continuity programs.
Participate in critical vendor assessments and supply chain risks.
Prepare documentation for audits, regulators, and risk committees.
Develop dashboards and executive reports for Risk, Compliance, Security, and Internal Audit areas.
Collaborate in crisis simulation exercises and operational resilience tests.

Requirements

Experience or knowledge in the following regulations and frameworks:

ISO 27001
ISO 22301
NIST
DORA (Digital Operational Resilience Act)
NIS2
General Data Protection Regulation (GDPR)
EBA Guidelines on ICT and Security Risk Management
EBA Guidelines on Outsourcing Arrangements
ECB Cyber Resilience Oversight Expectations (CROE)
PSD2 / PSD3
MiFID II
Solvency II
European Banking Authority (EBA) Guidelines
CRA
IA Act

Valued certifications

ISO 27001 Lead Auditor
ISO 27001 Lead Implementer
CRISC
CISM
CISSP
ISO 22301 Lead Auditor

About Advens

Advens is a European, independent cybersecurity services company with around 600 experts across France and Europe. It helps organisations prevent and neutralise cyberattacks through services spanning risk and strategy, cyber compliance (including ISO 27001), offensive security auditing, SOC-as-a-Service and MDR via its mySOC platform, CERT incident response, and security technology integration, serving sectors such as healthcare, public services and industry 4.0. The company holds B Corp™ certification and channels part of its financial performance into its 'Advens for People and Planet' endowment fund.

Industry: Cybersecurity
Employees: 600

Good to know if you are moving

Current open roles in Spain include GRC consulting (Bilbao), Cybersecurity Engineer, DFIR specialist and FullStack DevOps Engineer (AWS/CDK/Python).
The company is labelled Great Place To Work® and highlights autonomy, trust and initiative-taking, with the option to work remotely or from the office.
Advens is B Corp™ certified and describes itself as an independent European cybersecurity company with 600 experts across France and Europe.
Its job families span Governance, Risk & Compliance, offensive security, CERT, security technology, project management, cyber defence, DevOps and data science.

In their own words

About the company & team

📢 Joining Advens means joining a European leader in Cybersecurity, but, above all, it means being part of a team of passionate specialists who protect increasingly exposed organizations, helping them fulfill their missions, which are often essential.

It also means being part of a collective that puts its performance at the service of high-impact projects.

🌎 We have 600 experts distributed across France, Spain, Germany, as well as Montreal and Tahiti.

Our mission of protection guides and drives us every day, but it is not enough. If cybersecurity can make the world work, our performance must also contribute to changing it.

Together and always forward: from our very first steps, we have relied on three fundamental values. More than a brand, they are our driving force to act today and improve tomorrow: #Audacity #Collective #Impact.

🚀 Training, growth opportunities, mobility… we support every project according to the desires and ambitions of each person.

We believe in a work-life balance as a way for individual development, so we commit to autonomy: freedom in the workplace, but also in the way we organize ourselves day to day.

And to maintain our valuable team spirit, our weeks are full of moments of socializing and sharing… always with a touch of humor.

As you can see, we look for more than cybersecurity experts: we look for committed and passionate people.

All open roles at Advens