Lead Security GRC

At our company, we strive to create a culture of continuous learning, personal growth, and inter- national community involvement. We're passionate about providing our employees with the tools and resources they need to succeed, and we're confident that you'll love being part of our team!

• Working Hours
  We offer flexible working hours to accommodate your work schedule. We can work part of our time remotely and the rest at our offices in Madrid, Torre Europa.

• Meal allowances

  You can enjoy delicious meals on us, no matter if you are working remotely or on-site.
  *Option to use it for public transportation or childcare instead.

• Internet Compensation
  We cover the cost of your home internet connection, as we understand how essential connectivity is in the modern workplace.

• Training courses
  Our company is committed to helping our employees grow and develop their skills, which is why we offer a variety of industry- specific training courses and a learning channel.

• Gym Coverage
  Stay active and healthy with our 90% coverage benefit, which provides access to the nearby gym: Forus Selection to keep you energized throughout the day

• Health Insurance
  We take the health and well-being of our employees seriously, which is why we offer a comprehensive health insurance plan and the option to extend it to your spouse and children.

At Axpo Group, we are dedicated to fostering a culture of non-discrimination, tolerance, and inclusion. As an equal opportunity employer, we welcome applications regardless of race and ethnicity, gender identity and expression, sexual orientation, age, disability, as well as socioeconomic, cultural, and religious background. We are committed to ensuring a respectful and inclusive recruiting process and workplace for everyone.

• A background in Computer Science, IT, Information Security, or a related field

• Experience in a GRC role, ideally within an enterprise environment, with a solid understanding of cybersecurity concepts

• Experience leading and developing teams, with strong communication skills across functions and seniority levels

• Knowledge of ISMS implementation (e.g., ISO/IEC 27001), security risk management, and governance

• A proactive, pragmatic, and outcome-oriented mindset, with strong analytical and problem-solving skills

• Ideally, familiarity with regulations such as NIS2, SOC reporting, or ISO/IEC 27002, and a CISSP or CISM certification; knowledge of German or Spanish is a plus

Even if you don't meet all the requirements, we look forward to your application.

Help shape Axpo's cybersecurity future. Join the Group CISO Office and lead group-wide security governance, risk and compliance initiatives across a dynamic, international energy business.

• Lead and grow the GRC team, including line management, budget ownership, and defining the GRC strategy

• Translate Axpo Group's security policies into actionable initiatives, aligning frameworks with local delivery and risk management

• Strengthen governance, controls, and risk practices across IT, Cloud, OT & ICS environments

• Drive cybersecurity maturity and compliance programs (e.g., ISMS, NIS2, trading and market operations), including risk treatment and remediation tracking

• Own end-to-end information security processes such as compliance, risk management, third-party security, and incident response

• Represent the GRC function to regulators, auditors, and Group leadership, and report on security posture through metrics and dashboards