The English-language job board for Spain

Grc Specialist

Remote, Balearic Islands·Added 2 days ago (last checked 12 Nov)

Grupo Sermicro

52 open roles

Apply

Our summary

Work mode: Remote (Balearic Islands)
Spanish: Expected (ad in Spanish)
Education: University degree

Visa options

The ad rules out sponsorship
The advert says visa sponsorship isn’t available for this role.

Find jobs with visa support

Skills

This job advert was originally written in Spanish.

Requirements

What we're looking for

Demonstrable experience in Governance, Risk, and Compliance (GRC) roles.
Solid knowledge of standards and regulatory frameworks such as ISO 27001, NIST, PCI-DSS, ENS, NIS2, DORA, or equivalents.
Experience in corporate and technological risk management.
Experience in security, compliance, or management system audits.
Ability to coordinate cross-functional initiatives with technical and business areas.
General knowledge of information security environments, technologies, and controls.
Experience in project management and monitoring

We will especially value

Nice to have

CISA, CISM, CISSP, CRISC, or similar certifications.
Previous experience in companies within the Travel, Hospitality, or Tourism sectors.
Experience in Information Security Management Systems (ISMS).
Knowledge of Agile methodologies.

Education & certifications

University degree in Computer Engineering, Telecommunications, or a similar field.
Master's degree or specialized training in Cybersecurity.

Pay & benefits

What you'll get

Stable project with direct impact on the business.
Participation in strategic security and compliance initiatives.
Stable contract.
Flexible schedule. 100% remote modality from Spain.
Collaborative environment with multidisciplinary teams.
Flexibility and 100% remote modality from Spain.

The role

At DIMÁTICA, a company recognized as a Microsoft Partner, we specialize in the design, development, and maintenance of software solutions in multiplatform environments.

We are currently looking for a GRC (Governance, Risk & Compliance) Specialist to join a Security & Fraud team within a major company in the tourism sector.

We are looking for a profile with experience in security governance, risk management, regulatory compliance, and auditing, capable of acting as a link between the business, technology, cybersecurity, and data protection areas, ensuring the correct implementation and monitoring of corporate security frameworks.

Important: Although we value cybersecurity knowledge, this position has a focus primarily oriented toward Governance, Risk, and Compliance (GRC). We are looking for professionals with experience in risk management, auditing, regulatory compliance, ISMS, and security governance, rather than operational cybersecurity functions such as SOC, Pentesting, or Incident Response.

What you'll do

Maintain and evolve the Information Security Management System (ISMS).
Participate in the definition, implementation, and monitoring of security policies, procedures, and controls.
Manage and coordinate internal and external audits related to information security and compliance.
Identify, assess, and monitor corporate and technological risks.
Collaborate in the definition and execution of the Security Master Plan. Supervise compliance with regulatory frameworks and security standards.
Coordinate security governance initiatives with IT, Cybersecurity, and Business teams.
Act as a technical interlocutor with the Data Protection area.
Define and monitor indicators, metrics, KPIs, and OKRs related to security and compliance.
Participate in the continuous improvement of governance, risk, and compliance processes.
Verify the correct implementation and effectiveness of established security controls.
Prepare executive reports and documentation for audits, committees, and governing bodies.