GRC Technical Specialist

• 🚀 High-impact international project

• 🌍 Collaborative and multicultural environment

• 📈 Role with visibility and responsibility

• 🏢 Stable employment at an international company

• 💰 Competitive salary based on experience

• 📊 Flexible compensation

• 📚 Ongoing training in GRC and security

• ⏰ Flexible working hours

• 🏠 Fully remote with occasional travel

Would you like to join this international project within the Security & Fraud area? Working with global teams on strategic compliance, risk and information security initiatives. We want to meet you!

At Excelia, a multinational Consulting, Technology and Professional Services firm, with more than 25 years of experience and a presence in over 50 countries, we are looking to hire a GRC Technical Specialist to strengthen our Security & Fraud team.

This is a key role in international Governance, Risk and Compliance (GRC) projects, within a dynamic and collaborative environment 🌍

• 🔎 Define and analyze Information Security requirements for IT and the business

• 🛡️ Collaborate with IT and Cyber teams on the implementation of security controls

• 🧩 Participate in Governance, Risk and Compliance (GRC) processes

• 🔐 Act as technical liaison with the Data Protection area

• 📊 Define and monitor Information Security KPIs and OKRs

• 🏗️ Contribute to the Security Master Plan and ISMS

• ⚠️ Participate in corporate risk management and business continuity

• 🧪 Audit compliance with ISMS policies, procedures and controls

• 🔍 Audit IT and business processes, products and services

• 🤝 Collaborate across teams on GRC and Cybersecurity initiatives

🌐 Fully remote role based in Spain

Participate in the definition, implementation and oversight of the security and compliance framework, ensuring the integration of security controls into business and technological processes.

• 🎓 Technical education (Computer Engineering, Telecommunications or similar)

• 🌐 Minimum B2 level of English

• 📚 Knowledge of security frameworks:

  • ISO 27001

  • NIST

  • ENS

  • PCI-DSS

  • NIS2

  • DORA

• 📊 Experience in project management

• ⚙️ Knowledge of IT environments and information security

• 🧠 Soft skills: communication, proactivity, autonomy, assertiveness

• 🏅 Certifications valued: CISA / CISM / CISSP or similar

• ✈️ Experience in the Travel & Hospitality sector

• 🧪 Experience in audits (first and second party)

• 🛡️ Knowledge of applied cybersecurity

• 🔁 Agile / Scrum methodologies

• 🌍 Experience in multinational GRC environments