The English-language job board for Spain

GRC Technician

Hybrid in Palma·Added today (last checked 11 Nov)

knowmad mood

354 open roles

Apply

Our summary

Hours: Jornada intensiva in summer
Payments: 12 or 14 salary payments a year
Work mode: Hybrid, Palma
Contract: Permanent
Spanish: Expected (ad in Spanish)
English: Required
Experience: 3+ years
Benefits: Private health insurance, flexible pay plan, meal vouchers

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

Nice to have

ISO 27001

This job advert was originally written in Spanish.

Requirements

What we're looking for

Previous experience of at least 3 years in Governance, Risk, and Compliance (GRC), Information Security, or Cybersecurity positions.
Knowledge of security frameworks and standards such as ISO 27001, ENS, NIST, CIS Controls, or similar.
Experience in the implementation, maintenance, and auditing of Information Security Management Systems (ISMS).
Knowledge in information security risk management and analysis.
Experience in the definition and monitoring of controls, indicators, KPIs, and improvement plans.
Knowledge of regulations related to privacy and data protection (GDPR/LOPDGDD).
Ability to coordinate initiatives with different business and technology areas.
Experience in internal audits and support for external audits.
Analytical capacity, attention to detail, and communication skills.
Minimum English level B2.

Nice to have

Certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISM, CRISC, CISA, or similar.
Experience in cloud environments (AWS, Azure, or Google Cloud).
Knowledge of business continuity and disaster recovery plans.
Experience in highly regulated sectors.

Pay & benefits

What you'll get

Permanent contract
Work model: 100% REMOTE
Schedule⏰: 8.5 hours from Monday to Thursday and 6.5 on Fridays. Intensive schedule mid-June, July, and August: 7 hours
Vacation 🌴: 22 vacation days + 2 personal days, plus December 24 and 31 off.
Permanent contract 📄: From day one, with the option of 12 or 14 payments.
Flexible compensation 💳: Restaurant card, childcare voucher, health insurance, training, and other benefits with tax advantages.
Benefits club 🎁: Discounts on technology, leisure, and training.
Continuous training 📚: Access to Udemy Business, language courses, official certifications, and technical training.
Career plan 🚀: Support to grow, specialize, or take on new challenges.
Comprehensive well-being 💚: Nutrition, physical activity, and emotional balance programs.
Work-life balance +LIFE 👨 👩 👧 👦: Personal and family support 24/7.
Inclusive environment 🌍: Diverse and multicultural setting.
Social events 🎮: Activities to connect with the team.

The role

We are looking to hire a GRC Technician to join the Information Security team, participating in the definition, implementation, and evolution of the organization's Governance, Risk, and Compliance processes. The selected person will act as a link between the Business, IT, Cybersecurity, and Data Protection areas, contributing to strengthening the corporate security framework and ensuring regulatory and compliance adherence.

What you'll do

Define, analyze, and manage corporate Information Security requirements for the IT and Business areas.
Collaborate with the IT and Cybersecurity teams in the implementation and monitoring of security controls.
Participate in and lead initiatives related to Governance, Risk, and Compliance (GRC).
Act as a technical interlocutor with the Data Protection area, guaranteeing alignment between privacy and security.
Define, analyze, and monitor Information Security KPIs, metrics, and indicators.
Collaborate in the definition, maintenance, and execution of the Security Master Plan and the ISMS.
Participate in the definition and monitoring of Business Continuity strategies and plans.
Collaborate in the identification, assessment, and management of risks within the Corporate Risk Management Framework.
Perform audits and reviews of compliance with ISMS policies, procedures, and controls.
Evaluate processes, products, and services—both technical and business—from a security and compliance perspective.
Prepare executive reports, technical documentation, and improvement proposals.
Actively participate in cross-functional initiatives related to GRC, cybersecurity, and risk management.

How you'll work

📍 Location: Palma de Mallorca (hybrid model) or remote from Mainland Spain

About knowmad mood

knowmad mood is an IT consulting and technology services company based in Madrid, Spain, specializing in digital transformation, cloud infrastructure, data engineering, cybersecurity, and enterprise software development. With a strong focus on emerging technologies like AI, automation, and DevOps, the company serves clients across sectors including insurance, retail, and manufacturing, offering both project-based consulting and managed services. They operate with a distributed team model, supporting remote and hybrid work across Spain.

For international professionals, knowmad mood offers a dynamic and flexible work environment with many roles available as 100% remote or hybrid positions across Spain, including in Madrid, Barcelona, and Palma de Mallorca. The company emphasizes continuous learning and innovation, making it an attractive option for tech talent looking to work on modern stacks like Java, Kubernetes, Azure, GCP, and AI platforms. While the company is Spanish-founded, its client base and project scope often require English proficiency, providing opportunities for non-Spanish speakers to integrate.

Industry: IT Consulting
Founded: 2010
Employees: 500–1,000
Headquarters: Madrid, Spain
In Spain: Madrid, Barcelona, Palma de Mallorca

Good to know if you are moving

Many roles are offered as 100% remote within Spain, providing flexibility for international hires to live anywhere in the country.
The company has offices in Madrid, Barcelona, and Palma de Mallorca, offering options for hybrid work in major Spanish cities.
English proficiency is required for many positions, making it accessible for non-Spanish speakers.
knowmad mood focuses on modern technologies like Java, Kubernetes, Azure, GCP, and AI, offering opportunities to work on cutting-edge projects.
The company supports professional development with a strong emphasis on certifications and continuous learning.

In their own words

Additional information

Sign up and we'll give you more details! 🚀

To stay up to date with our news follow us here -> knowmad mood

We are committed to equal opportunities and respect for diversity. We apply our Equality Plan and the principle of non-discrimination in all our selection processes

All open roles at knowmad mood