Altia is a leading Spanish digital transformation and IT consulting firm that provides end-to-end technology services, including software development, cloud computing, and cybersecurity. Founded in 1994 and listed on the BME Growth market, the company has grown into a major player in the Iberian technology sector with a workforce of over 3,200 professionals.

Headquartered in A Coruña, Altia maintains a strong nationwide presence with offices in Madrid, Barcelona, Bilbao, and several other Spanish cities. The company is particularly relevant for international professionals due to its status as a major contractor for European Union agencies and its diverse range of technical roles spanning Artificial Intelligence, Data Science, and enterprise software development.

Founded in 1994 in A Coruña, Altia began as a local IT services provider before expanding nationally across Spain. In 2010, it became a public company listed on the BME Growth market, and in 2019, it significantly expanded its international footprint through the acquisition of the Portuguese firm Noesis.

Senior GRC Specialist Consultant

Altia

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

#SomosAltia

For over 30 years, we have been creating future-ready digital solutions capable of generating real value and provoking significant changes.

We are a team of more than 4,000 great professionals spread across more than 30 locations in 10 countries who, since 1994, have combined their energy and applied their innovative vision of technology to truly relevant projects for more than 1,000 organizations that are engines of change.

We are driven by a clear purpose: to grow by helping others grow, and to do so in a sustainable and lasting way. We are clear that we will only be important if, together, we provide a positive impact and all evolve in the process.

With intact values, we are one of the first independent companies in the sector. Since 2010, Altia has been listed on the BME Growth, the market for expanding companies.

👀 What are we looking for? 👀

At Altia, we continue to grow and are looking for a Consultant specializing in GRC to join our team.

Requirements:

* At least 5 years of experience performing functions as a consultant in Governance, Risk, and Compliance (GRC).
* Advanced knowledge and practical experience in the main regulatory frameworks and reference standards, which must include:
* The National Security Framework (ENS), with experience in conducting compliance assessments for systems classified as medium and high levels.
* ISO/IEC 27001 on information security management, participating in readiness and adequacy assessments for the standard in different types of organizations.
* ISO 22301, in the context of designing and implementing business continuity plans aligned with international best practices.
* The NIST Cybersecurity Framework (versions 1.0 and 2.0), with experience in maturity assessment and definition of action plans to cover the identified GAP.
* ISO 31000, applying corporate risk analysis and management methodologies.
* ISO 27014, in the assessment of the governance of information security management systems (ISMS).

The following certifications will be valued:

* Lead Auditor ISO 27001
* ITIL Foundation
* CISA
* CISM
* CRISC

Experience in the field of public administration is a plus.

Functions:

* Legal advice and provision of professional services for entities in the public and private sectors.
* Risk analysis and management.
* Preparation of reports and documentation on legal aspects.
* Participation in projects for the implementation of regulations and audits.

⭐ WHAT DO WE HAVE FOR YOU?

🚩 Hybrid work model (2 days a week on-site in Vitoria).

⏰ Flexible schedule.

Boost your career with us and achieve your professional goals!

This job offer is written taking into account impartiality and non-discrimination based on gender, race, ideology, or any other reason. In particular, respect for current regulations regarding gender equality between women and men (Royal Decree-Law 6/2019) is taken into account.

View original advert (Spanish)

#SomosAltia

Llevamos más de 30 años creando soluciones digitales preparadas para el futuro, capaces de generar valor real y provocar cambios significativos.

Somos un equipo de más de 4.000 grandes profesionales repartidos en más de 30 localizaciones de 10 países que, desde 1994, suman su energía y aplican su visión innovadora de la tecnología a proyectos realmente relevantes, para más de 1.000 organizaciones que son motores del cambio.

Nos mueve un claro propósito: crecer haciendo crecer, y hacerlo, además, de forma sostenible y duradera. Tenemos claro que solo seremos importantes si juntos aportamos un impacto positivo y todos evolucionamos en el proceso.

Con unos valores intactos, somos una de las primeras compañías independientes del sector. Altia cotiza, desde 2010, en el BME Growth, el mercado de las empresas en expansión.

👀 ¿Qué buscamos? 👀

En Altia seguimos creciendo y buscamos un/a Consultor/a especializado en GRC para unirse a nuestro equipo.

Requisitos:

* Al menos 5 años de experiencia realizando funciones como consultor/a en Gobierno, Riesgo y Cumplimiento (GRC).
* Conocimiento avanzado y experiencia práctica en los principales marcos normativos y estándares de referencia, entre los que se deben incluir:
* El Esquema Nacional de Seguridad (ENS), con experiencia en la realización de assessments de cumplimiento para sistemas clasificados en niveles medio y alto.
* La ISO/IEC 27001 sobre gestión de la seguridad de la información, participando en evaluaciones de preparación y adecuación a la norma en distintos tipos de organizaciones.
* La ISO 22301, en el contexto del diseño e implantación de planes de continuidad de negocio alineados con buenas prácticas internacionales.
* El NIST Cybersecurity Framework (versiones 1.0 y 2.0), con experiencia en la evaluación de madurez y definición de planes de acción para cubrir el GAP identificado.
* La ISO 31000, aplicando metodologías de análisis y gestión de riesgos corporativos.
* La ISO 27014, en la valoración de la gobernanza de los sistemas de gestión de seguridad de la información (SGSI).

Se valorará disponer alguna de las siguientes certificaciones:

* Lead Auditor ISO 27001
* ITIL Foundation
* CISA
* CISM
* CRISC

Valorable experiencia en el ámbito de la administración pública

Funciones:

* Asesoramiento jurídico y prestación de servicios profesionales para entidades del sector público y privado.
* Análisis y gestión de riesgos.
* Elaboración de Informes y documentación sobre aspectos jurídicos.
* Participación en proyectos de implantación de normativas y auditorías.

⭐ ¿QUÉ TENEMOS PARA TI?

🚩 Modelo de trabajo híbrido (2 días a la semana presencial en Vitoria).

⏰ Horario flexible.

¡Impulsa tu carrera con nosotros y alcanza tus metas profesionales!

La presente oferta de empleo está redactada teniendo en cuenta la imparcialidad y no discriminación por razón de género, raza, ideología o cualquier otro motivo. Especialmente, se tiene en cuenta el respeto a la normativa vigente relativa a la igualdad de género entre mujeres y hombres (Real Decreto-ley 6/2019).