GRC Consultant

Sopra Steria·Madrid, Spain (Hybrid)

What they offer

  • Permanent contract

    Full-time hours.

  • Hybrid

    Office and home days — the ad has the split.

What they ask for

  • Have the right to work in Spain

    No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

  • Speak fluent Spanish

    Listed as a requirement in the ad.

  • Be near Madrid, Spain (Hybrid) for hybrid days

    No relocation package mentioned.

Pulled from the advert automatically — the full ad is what counts.

Added 2 months ago
Read the full advert

About the role

For our Cybersecurity Unit, we are looking for Cybersecurity Consultants with a specialization in GRC, based in Madrid.

We are looking for both junior and senior consultants.

What you'll do

Functions

  • Participation in information security risk analyses aligned with ISO 27001 / ENS
  • Identification of assets, threats, and vulnerabilities
  • Support in risk assessment and evaluation
  • Collaboration in defining and monitoring treatment plans
  • Asset management
  • Support in asset inventory and classification
  • Maintenance and updating of the asset register in GRC tools
  • Support in the implementation and maintenance of management systems in accordance with:
  • ISO 27001
  • ISO 22301
  • ENS
  • Support in conducting regulatory gap analysis
  • Collaboration in updating policies, procedures, and documentation
  • Participation in third-party security assessments
  • Support in supplier risk analysis
  • Basic monitoring of compliance with security requirements

What you'll get

  • Permanent contract and full-time schedule
  • 23 vacation days
  • Continuous training: technical, transversal, and language skills. We have access to certifications, training from major Technology Partners, online platforms, and much more!
  • Life and accident insurance
  • Possibility of joining our flexible compensation (medical insurance, nursery vouchers, transportation, meals, and training)
  • Access to Privilege Club, where you will find interesting discounts from major brands
  • Personalized and detailed onboarding. We accompany you every step of the way so that you feel #soprano from the very beginning.
  • Office with spaces reserved for leisure. Work and fun combined!
  • Camaraderie and good atmosphere, we keep the power of unity in mind.

And most importantly... you have the opportunity to develop your career with us: we will create a personalized career plan together. You will receive training, we will set goals, and we will follow up to ensure we achieve them together. We listen to your priorities and fight for them.

Your voice matters here! Join us and be part of something bigger!

About the company & team

Because working at Sopra Steria is also about feeling Sopra Steria.

We are a recognized European leader in consulting, digital services, and software development, with nearly 56,000 employees in almost 30 countries and more than 4,000 in Spain.
We focus on people, their training, and professional development, which drives us to grow and constantly improve.

We are passionate about digital, and just like you, we seek the best adventure. We want your day-to-day to become your greatest inspiration. That you learn, contribute, have fun, grow, and above all, enjoy to the fullest.

If you want to be part of a "Great Place to Work" team, keep reading!

What are we looking for?

We are looking for consultants with experience in cybersecurity, preferably in GRC or risk management:

  • Experience or participation in security risk analysis (SRA)
  • Basic knowledge of ISMS implementation and maintenance
  • Knowledge of regulatory frameworks:
  • ISO 27001
  • ISO 22301
  • ENS (valuable)

Skills

  • Identification and analysis of risks
  • Support in risk scenario modeling
  • Management and updating of asset inventory

Reporting and governance

  • Reporting and governance
  • Support in defining and monitoring security KPIs
  • Preparation of reports (weekly and monthly)
  • Participation in security committees and governance bodies (PRM / TRM or others)

Additional information

At Sopra Steria, we are committed to creating a diverse and inclusive environment, evaluating each candidacy objectively, based on their competencies and experience. We firmly believe that the diversity of experiences and perspectives is what drives our innovation.

You'll most likely need Spanish to apply.This job was automatically translated to English, .

About the company

Sopra Steria

Sopra Steria

IT Consulting

View company profile
International company
56000 employees