The English-language job board for Spain

GRC Consultant

Hybrid in Madrid·Full-time·Added 3 days ago (last checked 22 Oct)

Izertis

76 open roles

Apply

Our summary

Work mode: Hybrid, Madrid
Contract: Permanent contract, full-time hours
Hours: Jornada intensiva on Fridays and in summer
Experience: 3+ years
Benefits: Private health insurance, flexible pay plan, meal vouchers

Visa options

The ad rules out sponsorship
The advert says visa sponsorship isn’t available for this role.

Find jobs with visa support

Skills

This job advert was originally written in Spanish.

Requirements

What we're looking for

At least 3 years of experience in the implementation and evaluation of the National Security Framework (ENS - RD 311/2022).
At least 3 years of experience performing risk analysis using the MAGERIT methodology.
At least 3 years of experience using GRC or risk analysis tools, especially PILAR, GlobalSuite, or equivalent regulatory and risk management tools.
At least 3 years of experience participating in the implementation, maintenance, and improvement of Information Security Management Systems (ISMS) based on ISO 27001.
Experience in the design, development, implementation, or maintenance of Business Continuity Plans aligned with ISO 22301.

Nice to have

Previous experience in projects for Public Administration bodies is valued.

Pay & benefits

What you'll get

Permanent contract from day one.
Flexible schedule with reduced working hours on Fridays.
Intensive working hours during the months of July and August.
22 working days of vacation, your birthday, and the days December 24 and 31.
Flexible compensation with options such as medical insurance, meal vouchers, transport, and childcare.
Free English classes.
Access to a catalog of benefits and discounts.

The role

At Izertis, we are looking to expand our team by bringing on a Cybersecurity, Risk, and Regulatory Compliance Consultant to work within the Public Administration sector.

What you'll do

Participate in projects involving the implementation, adaptation, and continuous improvement of the National Security Framework (ENS), ensuring compliance with applicable regulatory requirements.
Perform risk analysis and management using the MAGERIT methodology, identifying threats, vulnerabilities, and mitigation measures.
Prepare and maintain documentation associated with regulatory compliance and information security projects.
Manage and update GRC and risk analysis tools such as PILAR, GlobalSuite, or equivalent solutions.
Participate in the implementation, maintenance, and improvement of Information Security Management Systems (ISMS) in accordance with the ISO 27001 standard.
Collaborate in the definition and implementation of security controls, policies, procedures, and risk treatment plans.
Participate in internal and external security audits, performing follow-ups on findings and action plans.
Develop and maintain Business Continuity Plans and collaborate on initiatives related to ISO 22301.
Prepare monitoring reports, dashboards, and executive documentation for different organizational levels.
Coordinate with technical teams, business owners, and external organizations to guarantee compliance with security and continuity requirements.

How you'll work

The work will be in a hybrid modality in Madrid Centro.

About Izertis

Izertis is a Spanish technology consulting and engineering firm specializing in digital transformation, software development, and IT services. The company operates across multiple sectors including public administration, healthcare, industry, and financial services, offering solutions in areas such as cloud computing, cybersecurity, data analytics, and enterprise software implementation. With a workforce of over 1,000 professionals, Izertis has established itself as a significant player in the Spanish and European tech consulting market.

Izertis has a strong presence in Spain, with its headquarters in Gijón and additional offices in Madrid, Barcelona, and other major cities. The company is known for its commitment to talent development, offering programs like 'FutureWave' for junior talent and fostering a collaborative and innovative work culture. For international professionals, Izertis provides opportunities to work on diverse projects with a Spanish-speaking client base, making it an attractive option for those looking to build a career in Spain's growing tech sector.

Industry: IT Consulting
Founded: 1996
Employees: 1,000–5,000
Headquarters: Gijón, Spain
In Spain: Gijón, Madrid, Barcelona and 2 more
Website: izertis.com

Good to know if you are moving

Izertis has a formal 'FutureWave' program designed to attract and develop junior tech talent, offering structured career paths for recent graduates.
The company works with a wide range of clients, including public administrations, which can provide exposure to large-scale digital transformation projects.
While Spanish is the primary working language, the company's international projects may offer opportunities for English-speaking professionals.
The company has offices in several Spanish cities, offering flexibility for those who may prefer living in a larger city like Madrid or Barcelona.
Izertis is a Spanish company, which can be an advantage for internationals looking to integrate into the local tech ecosystem.

In their own words

About the company & team

At Izertis, we drive the digital transformation of companies, organizations, and people through customized, innovative, and impactful technological solutions.

Founded in 1996, with 30 years of history and included in the BME Continuous Market, izertis establishes itself as one of the 1000 fastest-growing companies among European countries.

Currently, we are more than 2,700 professionals distributed across offices in Europe, America, and Africa, with a presence in more than 50 countries where we provide services and projects through a wide portfolio of solutions such as:

Software Engineering; Consultancy & Governance; Cloud & Infraestructure; Cybersecurity; IA & Data & Emerging Technologies; CX & Business Solutions and other technologies enabling transformation processes.

And you, would you like to join our team? If so, don't hesitate to apply so that the Talent team can get to know you!

Also, don't forget to check the job offers section of our website for other options that may be interesting to you:

Join Izertis Talent: boost your tech career

All open roles at Izertis