Experteer Overview

In this role you will drive security governance and assurance for customer interactions, focusing on high-volume, defensible responses to CAQs, RFPs, and related attestations. You will collaborate with Sales, Legal, Privacy, Security, and Engineering to validate evidence and address gaps, while helping customers understand security controls and risk posture.

You will streamline contract security reviews and enhance operational readiness through standardized processes. This is a chance to shape customer trust in a fast-paced SaaS security environment with meaningful impact.

Compensaciones / Incentivos

- Own end-to-end completion of customer security questionnaires (CAQs), RFP sections, and assurance artifacts (SOC reports, ISO certificates, etc.).
- Leverage internal evidence repositories to provide accurate, consistent responses.
- Partner with internal stakeholders to validate responses and close gaps.
- Meet with customers to explain security controls and risk posture to various audiences.
- Assist in sales and post-sale cycles by addressing security objections and narrowing the audit scope.
- Perform security reviews of contracts, DPAs, and customer terms; identify obligations and risks; help negotiate positions with Legal and Security leadership.




- Track security commitments and ensure they are feasible and aligned with controls.
- Improve team efficiency via standardization, playbooks, and updated response libraries.
- Manage a high volume of concurrent requests with SLA-driven quality and accuracy.
- Keep evidence current and recommend process improvements for readiness.

Responsabilidades

- 3-6 years of experience in information security, security compliance, GRC, or related fields.
- Proven experience responding to customer security questionnaires and due diligence requests.
- Familiarity with SOC 2, ISO 27001, NIST, CIS, PCI DSS, HIPAA, GDPR, etc.
- Strong understanding of security fundamentals (access control, encryption, vulnerability management, secure SDLC, incident response, logging/monitoring, vendor risk).
- Experience collaborating cross-functionally (Security, Legal, Privacy, Engineering, Sales).
- Excellent written and verbal communication skills to translate controls into customer-ready responses.
- Strong organizational skills and ability to manage multiple deadlines in a fast-paced environment.

Requisitos principales

- comprehensive healthcare coverage
- flexible PTO
- equity RSUs
- annual performance bonus opportunities
- retirement account support
- 14+ weeks paid parental leave

📌 Information Security Assurance analyst (Madrid)
🏢 OneTrust
📍 Madrid