Senior GRC Specialist Consultant

At least 3 years of experience performing duties as a consultant in Governance, Risk and Compliance (GRC).

We have been creating digital solutions prepared for the future for over 30 years, capable of generating real value and driving significant change.

We are a team of more than 4,000 great professionals spread across more than 30 locations in 10 countries who, since 1994, have been adding their energy and applying their innovative vision of technology to truly relevant projects for more than 1,000 organizations that are engines of change.

We are driven by a clear purpose: to grow by helping others grow, and to do so in a sustainable and lasting way. We are clear that we will only be important if, together, we make a positive impact and all of us evolve in the process.

With our values intact, we are one of the leading independent companies in the sector. Since 2010, Altia has been listed on BME Growth, the stock market for growing companies.

👀 What are we looking for? 👀

At Altia we are still growing and we are looking for a Consultant specialized in GRC to join our team.

Requirements:

• At least 5 years of experience performing duties as a consultant in Governance, Risk and Compliance (GRC).
• Advanced knowledge and practical experience in the main regulatory frameworks and reference standards, including:
• The National Security Framework (ENS), with experience in conducting compliance assessments for systems classified at medium and high levels.
• ISO/IEC 27001 on information security management, participating in readiness assessments and compliance evaluations across different types of organizations.
• ISO 22301, in the context of designing and implementing business continuity plans aligned with international best practices.
• The NIST Cybersecurity Framework (versions 1.0 and 2.0), with experience in maturity assessments and defining action plans to address identified gaps.
• ISO 31000, applying methodologies for corporate risk analysis and management.
• ISO 27014, in the assessment of governance of information security management systems (ISMS).

Any of the following certifications will be valued:

• ISO 27001 Lead Auditor
• ITIL Foundation
• CISA
• CISM
• CRISC

Valuable experience in the public administration sector

Functions:

• Legal advisory and provision of professional services for public and private sector entities.
• Risk analysis and management.
• Preparation of reports and documentation on legal matters.
• Participation in regulatory implementation projects and audits.

🚩 Hybrid work model (2 days per week on-site in Vitoria).

⏰ Flexible working hours.

Boost your career with us and achieve your professional goals!

This job offer is drafted taking into account impartiality and non-discrimination based on gender, race, ideology, or any other reason. In particular, compliance with current regulations regarding gender equality between women and men is taken into account (Royal Decree-Law 6/2019).