We are looking for a GRC Senior Analyst to own and scale our Governance, Risk, and Compliance function within a fast-growing product company.What you will do- Own and lead the company’s GRC implementation across ISO 27001 and GDPR.- Build and manage the Information Security Management System (ISMS) aligned with ISO 27001.- Ensure GDPR compliance across all data processing activities, including data mapping, data leaks, and encryptions.- Act as the primary point of contact for auditors and prepare the company for ISO audits.- Identify compliance gaps and drive remediation plans with technical and non-technical teams.- Develop governance policies, procedures, and risk management frameworks.- Partner closely with Engineering and Security teams to embed controls into systems and SDLC processes.- Monitor regulatory and compliance changes and translate them into actionable requirements.Mandatory Requirements- 8+ years of experience in GRC, Risk,



Compliance, or IT Audit roles- 5+ years of strong hands-on experience with ISO 27001 and experience managing or supporting ISMS implementation.- 3+ years of practical experience with GDPR data mapping, reviewing systems from the tech side.- 5+ years of experience from a product tech company with general client reach in the US & EU (companies above 100 people).- Experience working with internal and external auditors- Very strong stakeholder management and communication skills across technical and non-technical teams.- Fluent EnglishNice to have- Familiarity with cloud environments (AWS, GCP, Azure).- Security certifications (CISA, CISM, ISO 27001 Lead Implementer/Auditor).- Other security experience.#LI-OK1#J-18808-Ljbffr

📌 Hq - Grc Senior Analyst (Madrid)
🏢 Jobandtalent
📍 Madrid