Jobandtalent

HQ - GRC Senior Analyst

Madrid, Spain

Full-Time

Remote

TLDR

Own ISO 27001 and GDPR implementation, build the ISMS, prepare for audits, and embed security controls across systems and SDLC processes.

We are looking for a GRC Senior Analyst to own and scale our Governance, Risk, and Compliance function within a fast-growing product company.

What you will do

Own and lead the company’s GRC implementation across ISO 27001 and GDPR.

Build and manage the Information Security Management System (ISMS) aligned with ISO 27001.

Ensure GDPR compliance across all data processing activities, including data mapping, data leaks, and encryptions.

Act as the primary point of contact for auditors and prepare the company for ISO audits.

Identify compliance gaps and drive remediation plans with technical and non-technical teams.

Develop governance policies, procedures, and risk management frameworks.

Partner closely with Engineering and Security teams to embed controls into systems and SDLC processes.

Monitor regulatory and compliance changes and translate them into actionable requirements.

Mandatory Requirements

8+ years of experience in GRC, Risk, Compliance, or IT Audit roles

5+ years of strong hands-on experience with ISO 27001 and experience managing or supporting ISMS implementation.

3+ years of practical experience with GDPR data mapping, reviewing systems from the tech side.

5+ years of experience from a product tech company with global client reach in the US & EU (companies above 100 people).

Experience working with internal and external auditors

Very strong stakeholder management and communication skills across technical and non-technical teams.

Fluent English

Nice to have

Familiarity with cloud environments (AWS, GCP, Azure).

Security certifications (CISA, CISM, ISO 27001 Lead Implementer/Auditor).

Other security experience.

#LI-OK1

Benefits

Remote-Friendly

Fully remote role

Jobandtalent

Job&Talent is an AI-powered workforce management platform that transforms how temporary labor is sourced and managed, particularly for frontline industries. We connect skilled workers with leading employers, driving productivity and efficiency while empowering employees to work on their own terms. Our innovative technology enhances transparency and accessibility in the hiring process, making us a key player in the global employment landscape.

Founded: Founded 2009
Employees: 201-500 employees
Industry: Internet Software & Services
Total raised: $510M raised

View company profile

Analyst