Cybersecurity Governance Risk & Compliance Lead (Madrid - Hybrid) The company : Our customer is a technology-based startup with solid funding that is in the midst of expansion.
They will hire the selected candidate as an internal and permanent employee, based in Madrid, but providing services to their global organization.
Description of the position :
We're looking for a Governance Risk & Compliance Lead for its integral operations in Madrid. He/She will be responsible for designing and operationalizing the company's governance, risk, and compliance framework. Reporting to the Head of Information Security, he/she will play a critical role in enabling company growth by ensuring regulatory readiness, managing risk, and embedding security and compliance into business and product operations.
Key Responsibilities and tasks :
- Lead the implementation of GDPR, ISO 27001, SOC 2, and NIS 2 compliance programmes, with a roadmap aligned to business priorities and client expectations.
- Develop and maintain policies, procedures, and controls that support certification and audit readiness.




- Coordinate with external auditors, consultants, and vendors to streamline evidence collection and reporting.
- Operationalize the NIST Cybersecurity Framework across the corporate, product and operational domains
- Conduct regular risk assessments and maintain a centralized risk register.
- Collaborate with IT, Product and Legal teams to ensure risk mitigation strategies are prioritized correctly.
- Governance & Policy Enforcement :
- Establish governance structures for security and compliance decision-making.
- Run regular risk committees and track related actions.
- Maintain and enforce policies such as password management, access control, and vendor risk.
- Reporting & Communication :
- Provide regular updates to executive leadership on compliance progress, risk posture, and audit outcomes.
- Develop dashboards and visualizations to communicate timelines and milestones to stakeholders.
- A

📌 Team Leader (España)
🏢 Montarelo Recruiting
📍 España