The English-language job board for Spain

Senior GRC Analyst

Remote, Barcelona·Added 3 days ago

FYUL

17 open roles

Apply

Overview

Job details

€5,000 a month
Gross, as stated in the ad.
Fully remote
Per the ad.
Blue Card threshold
Indicative — the ad doesn’t promise sponsorship.

Requirements

Work in English
English is required, per the ad.
Have 5+ years of experience
Mid-level role.

Pay & benefits

What you'll get

Monthly salary EUR 5,000+ gross, depending on work experience, education, and skills
A high-trust, compact team with minimal bureaucracy: initiatives move directly from proposal to implementation.
An opportunity to work remotely or in a modern and welcoming office in Riga.
Flexible working hours (start your day as late as 11 AM).
Private health insurance.
2 extra paid days off to focus on your mental or physical well-being.
1 extra paid day off to celebrate a Birthday or any other celebration of your choice.
Internal and external learning opportunities.
Access to mentorship, internal meetups, and hackathons, both on-site and online.
Free and healthy lunch if you work from the Rīga office.
Design and order your own merch using our platforms with an employee discount.
Exciting team-building events and parties you'll never forget!

FYUL is the engine that powers on-demand commerce at global scale.

Formed in 2024 through the merger of Printful, Printify, and Snow Commerce, we bring together tech, talent, and infrastructure to help people turn ideas into beautiful products.

From solo creators to entertainment giants, FYUL powers merch that connects with millions, backed by advanced tech, premium production, and global reach.

We're a fast-growing global company working toward powering great brands, great experiences, and great people.

We are an equal-opportunity workplace. We're committed to diversity and inclusion and make hiring decisions based solely on qualifications, merit, and work experience.

If you think you'd excel in this role, send us your resume in English, showing us why you are the right person for the job.

Interested, but don't think this is the right fit for you? Feel free to share it with friends and check out other open positions at our career site. We're always looking for creative and driven minds to join our ever-growing team!

AS Printful Latvia (Reģ. Nr. 40203050078)

Requirements

Education & certifications

5+ years of experience in cybersecurity GRC, IT audit, or security compliance, including direct hands-on participation in complete ISO 27001 and/or SOC 2 audit cycles, preferably on the industry side.
Strong communication and negotiation skills, with the professional confidence to hold a position under pressure from auditors, vendors, and internal stakeholders, and the judgment to know when refusal is the correct response.
Demonstrated automation capability: scripts, integrations, GRC platform implementations, or AI-assisted workflows. Software engineering background is not required; a track record of building practical automation is.
Self-directed working style with strong ownership: the ability to take ambiguous problems through to completed outcomes with minimal supervision.
Excellent written and spoken English.

Relevant certifications (e.g., ISO 27001 Lead Implementer/Lead Auditor, CISA, CISSP, CISM) are an advantage. Practical audit experience will be weighted more heavily than certification.

The role

What you'll do

Audit management. Plan and execute internal and external audit activities across ISO 27001, SOC 2, and related frameworks: evidence collection, control readiness, direct communication with external auditors, and follow-through on findings until closure. Represent the function confidently in audit interactions, including the ability to decline inappropriate requests in a professional and well-substantiated manner.
GRC automation. Design and implement automation for evidence collection and recurring compliance activities; apply compliance-as-code practices where they deliver measurable value; leverage AI-based agents and workflows to reduce manual effort. Maintain working knowledge of the commercial GRC platform landscape and prefer established industry solutions over custom development.
Vendor security operations. Conduct security assessments of third-party vendors during onboarding and annual reviews, with continuous improvement of the process's efficiency.
Risk management. Maintain the risk register: perform risk assessments, track remediation plans, and ensure timely closure of identified risks.
Policies, documentation, and security awareness. Develop and maintain information security policies and procedures in collaboration with the manager, and contribute to security awareness materials and training delivery.

Hiring process

3 steps2 interviewsa task to do

Intro chat
With Talent Acquisition team · 30–45 min
Introductory call about your experience, skills and motivation, with time for your questions.
Practical task
With a team member · Not every role
For some roles: a take-home assignment or a live session guided by a team member, to assess problem solving and the duties of the role.
Hiring manager interview
With a hiring manager · 30–60 min
Detailed questions about your experience plus situational or behavioural questions.
Decision and offer · With a recruiter

The same process block is published on every job page of the careers site.

About FYUL

FYUL is a global on-demand commerce company that powers the production and fulfillment of merchandise for a wide range of sellers, from individual creators to global brands. The company operates through its brands Printful, Printify, and Snow Commerce, providing technology, talent, and infrastructure to enable on-demand manufacturing at scale. FYUL's platform supports millions of sellers and integrates with numerous print providers worldwide, making it a significant player in the e-commerce and manufacturing sectors.

FYUL has a growing presence across multiple cities and disciplines, with operations in Latvia and other locations. The company emphasizes a culture of independence, care, and impact, and offers opportunities in engineering, product, operations, and other functions. For international professionals, FYUL provides roles in various locations, including remote positions within EMEA, making it an attractive option for those seeking to work in a dynamic, global e-commerce environment.

Industry: E-Commerce / Manufacturing
Founded: 2010
Headquarters: Cincinnati, USA
Website: fyul.com

Good to know if you are moving

FYUL operates through well-known brands Printful and Printify, which are recognized in the e-commerce and print-on-demand industry.
The company has a global presence with operations in multiple cities, including Latvia, and offers remote roles within EMEA.
FYUL's platform supports millions of sellers and integrates with over 140 print providers worldwide, indicating a large-scale operation.
The company's history includes the founding of Snow Commerce in 2010 and Printful in 2013, showing over a decade of industry experience.
FYUL emphasizes a culture of independence, care, and impact, which may appeal to professionals seeking a values-driven workplace.

In their own words

About the company & team

The Information Security Governance & Assurance function at FYUL is deliberately small and execution-focused. The Cybersecurity Governance & Assurance Manager is responsible for strategy, stakeholder relationships, and cross-functional communication; this senior analyst role, reporting directly to the manager, is responsible for its execution: audits, evidence, vendor security, and the automation of GRC operations. This is an individual-contributor position where professional growth comes from depth of expertise and ownership of outcomes.

Printful & Printify hold active ISO 27001 and other certifications. The primary mandate of this role is to maintain and strengthen this certified posture, ensure the continuity of ongoing audit cycles, and extend the same governance standard to additional frameworks as the company's needs evolve.

All open roles at FYUL