Senior GRC Cybersecurity Specialist

📝 Permanent contract and professional stability.

🏠 100% remote work model from Spain.

🌍 Participation in international cybersecurity projects.

🚀 Projects related to GRC, risk management, regulatory compliance, and security auditing.

📚 Training plan and continuous professional development.

🤝 Collaborative, international, and innovation-oriented work environment.

💰 Competitive compensation according to experience and profile.

If you have experience in GRC, auditing, risk management, and regulatory compliance and are looking for a new challenge in international cybersecurity projects, we want to meet you!

🔹 What are we looking for?

We are looking for a professional specialized in Governance, Risk, and Compliance (GRC) within the IT Security field, with more than 5 years of experience and the ability to work transversally with different Cyber Risk & Compliance teams.

We are looking for a person with a solid combination of technical and regulatory knowledge, oriented towards risk management, regulatory compliance, and information security auditing.

💻 Technical knowledge

• Experience in control testing, internal audit, and information security systems auditing.

• Experience in information security risk management and regulatory compliance frameworks.

• Knowledge of ISO/IEC 27001, NIST CSF, ENS, DORA, NIS2, and GDPR.

• Solid knowledge of cybersecurity technologies and information systems.

• Experience with GRC tools, such as Archer, OneTrust, Formalize, or similar.

📌 Required experience

• More than 5 years of experience in Governance, Risk, and Compliance within the IT Security field.

• Experience in internal audit, control testing, and risk management.

• Experience working with cybersecurity regulatory standards and frameworks.

• Experience in certification, auditing, and regulatory adequacy processes.

• Ability to interpret regulatory requirements and convert them into concrete controls and measures.

• Experience in international environments.

• Fluent English (minimum C1), essential for working on 100% international projects.

🤝 Personal skills

• Analytical capacity and orientation towards risk management.

• Ability to interpret and translate regulatory requirements into practical environments.

• Orientation towards detail and quality.

• Organizational and monitoring skills.

• Autonomy and proactivity.

• Good communication skills and ability to interact with technical and business profiles.

• Orientation towards continuous improvement and process optimization.

• Valuable knowledge of PILAR and MAGERIT methodology.

• Valuable experience in process automation and the application of AI tools to optimize GRC operations.

📢 We are looking for a Governance, Risk, Compliance, and Strategy Specialist to join our Cybersecurity team!

🛠️ Main responsibilities

• Develop and maintain risk analyses and control frameworks in accordance with standards such as ISO 27001, NIST CSF, and ENS, as well as regulatory requirements such as DORA.

• Monitor risk treatment plans, analyzing their status, progress, and effectiveness.

• Manage the follow-up of non-conformities and corrective actions until their closure, guaranteeing traceability and the availability of evidence.

• Participate in the management of information security and ITGC audits.

• Perform documentary reviews within the framework of ISO 27001 and other standards, validating controls and evidence.

• Analyze applicable regulatory requirements, including ENS, DORA, NIS2, GDPR, and CRA, identifying possible gaps and supporting the corresponding adequacy plans.

• Interpret regulatory requirements and translate them into practical, measurable, and verifiable controls.

• Participate in certification processes and external audits.

• Collaborate with different teams to ensure compliance with security and regulatory requirements.

• Identify opportunities for automation and improvement of GRC processes, including the use of AI tools.

📍 Location: 100% remote from Spain