The English-language job board for Spain

GRC Consultant

Hybrid in Madrid·Full-time·Added 3 months ago (last checked 15 Oct)

Sopra Steria

107 open roles

Apply

Overview

Work mode: Hybrid, Madrid
Contract: Permanent contract, full-time hours
Benefits: Private health insurance, life insurance, flexible pay plan

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

Nice to have

This job advert was originally written in Spanish.

Requirements

What we're looking for

We are looking for consultants with experience in cybersecurity, preferably in GRC or risk management:

Experience or participation in security risk analysis (SRA)
Basic knowledge of ISMS implementation and maintenance
Knowledge of regulatory frameworks:
ISO 27001
ISO 22301
ENS (valuable)

Skills

Identification and analysis of risks
Support in risk scenario modeling
Management and updating of asset inventory

Pay & benefits

What you'll get

Permanent contract and full-time schedule
23 vacation days
Continuous training: technical, transversal, and language skills. We have access to certifications, training from major Technology Partners, online platforms, and much more!
Life and accident insurance
Possibility of joining our flexible compensation (medical insurance, nursery vouchers, transportation, meals, and training)
Access to Privilege Club, where you will find interesting discounts from major brands
Personalized and detailed onboarding. We accompany you every step of the way so that you feel #soprano from the very beginning.
Office with spaces reserved for leisure. Work and fun combined!
Camaraderie and good atmosphere, we keep the power of unity in mind.

And most importantly…You have the opportunity to develop your professional career with us: We will create a personalized career plan together. You will be trained, we will set goals, and we will follow up to ensure that we achieve them together. We listen to your priorities and fight for them.

Here your voice matters! Join us and be part of something more!

The role

For our Cybersecurity Unit, we are looking for Cybersecurity Consultants with a specialization in GRC, based in Madrid.

We are looking for both junior and senior consultants.

What you'll do

Participation in information security risk analyses aligned with ISO 27001 / ENS
Identification of assets, threats, and vulnerabilities
Support in risk assessment and evaluation
Collaboration in defining and monitoring treatment plans
Asset management
Support in asset inventory and classification
Maintenance and updating of the asset register in GRC tools
Support in the implementation and maintenance of management systems in accordance with:
ISO 27001
ISO 22301
ENS
Support in conducting regulatory gap analysis
Collaboration in updating policies, procedures, and documentation
Participation in third-party security assessments
Support in supplier risk analysis
Basic monitoring of compliance with security requirements
Reporting and governance
Support in defining and monitoring security KPIs
Preparation of reports (weekly and monthly)
Participation in security committees and governance bodies (PRM / TRM or others)

Hiring process

3 steps2 interviewsa task to do

Application review
Preliminary call
With a recruiter · Phone call
A first call about your career plan, availability and mobility to check expectations match on both sides.
First formal interview
A discussion of your motivation with details of the project context.
Technical and personality tests
Not every role
Offered depending on your profile.

Published by the Luxembourg entity; the Spanish careers site only gives interview tips.
The Spanish recruiting team reviews applications weekly and informs candidates of progress.
Feedback is shared after the interview stage.

About Sopra Steria

Sopra Steria is a European leader in IT consulting, digital transformation, and software development, headquartered in Paris, France. With over 50,000 employees across more than 30 countries, the company provides end-to-end services including consulting, systems integration, infrastructure management, and business process services. Its industry focus spans financial services, public sector, aerospace, healthcare, and manufacturing, delivering both technical expertise and strategic advisory to large enterprises and public institutions.

In Spain, Sopra Steria operates with a strong presence in Madrid and Barcelona, offering a wide range of roles from junior developers to senior architects and project managers. The company is known for its multicultural environment, with many positions requiring French or English, making it an attractive destination for international professionals. Sopra Steria emphasizes career development, continuous learning, and a collaborative culture, and it actively supports relocation and integration for foreign talent, particularly in its European delivery centers.

Industry: IT Consulting
Founded: 1968
Employees: 50,000+
Headquarters: Paris, France
In Spain: Madrid, Barcelona
Website: soprasteria.com

Good to know if you are moving

Sopra Steria has a significant presence in Spain with offices in Madrid and Barcelona, offering a wide range of IT roles.
Many positions require French or English, making it accessible for international professionals with language skills.
The company offers hybrid and remote work options, including some fully remote roles within Spain.
Sopra Steria provides career development programs and training opportunities, particularly in cloud, cybersecurity, and data.
As a global company, there are opportunities for cross-border projects and mobility within its international network.

In their own words

About the company & team

Because working at Sopra Steria is also about feeling Sopra Steria.

We are a recognized European leader in consulting, digital services, and software development, with nearly 56,000 employees in almost 30 countries and more than 4,000 in Spain.
We focus on people, their training, and professional development, which drives us to grow and constantly improve.

We are passionate about digital, and just like you, we seek the best adventure. We want your day-to-day to become your greatest inspiration. That you learn, contribute, have fun, grow, and above all, enjoy to the fullest.

If you want to be part of a “Great Place to Work” team, keep reading!

Additional information

At Sopra Steria, we are committed to creating a diverse and inclusive environment, evaluating each candidacy objectively, based on their competencies and experience. We firmly believe that the diversity of experiences and perspectives is what drives our innovation.

All open roles at Sopra Steria