Governance risk and Compliance Technical Specialist - Hybrid Madrid Get AI-powered advice on this job and more exclusive features. More in detail, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and a presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.

We are looking for a GRC Specialist contribute for a project with one of our general customers in the cybersecurity team. 4 years' experience in audits and compliance and assessments based on national and international standards (ISO27001, ISO22301, ENS, NIST, DORA, NIS2) ~ It is also desirable knowledge in ENS, ISO 27005, ISO22301, ISO 42001, NIST CSF 2.0, NIST, SOC 2, GDPR, DORA, NIS2, CMMC 2.0 ~ Proficiency with a variety of instruments for assessing and controlling risk (ex.

Experience in implementation of best practices, compliance with information security policies and standards. ~ Experience related to Cybersecurity ecosystem, deployment experience of security technologies. ~ Computer Engineering/Telecommunications and/or Master in Cybersecurity It is also desirable and will be considered to hold certifications such as CISM, CISSP, CISA, ISO/IEC 27001 Lead Auditor / Lead Implementer. ~ Domain Examples: BCMS, ISMS, Risk assessment (AARR & BIAs), GAP Analysis, Incident management, Awareness activities, Data Privacy, etc.) ~ Independently handle (with very minimal guidance from the supervisors)



internal audits or GAP Analysis to ensure compliance with security standards (ex. Responsible for the effective documentation of projects individually. ~ Point out the non-conformance areas and suggest measures to improve the information security individually. ~ Ensure that risk management is effectively conducted across the organization, business processes and information systems. ~ Coordinate information security awareness training programs for all the employees, contractors and approved system users. ~ Coordinate and Review the technical assessments of IT systems and processes to identify potential risks. Submit recommendations to mitigate any risks identified and ensure controls that they are implemented. ~ Design, plan and execute the Cybersecurity activities. ~ Prepare detailed description of user requirements and steps required to perform a compliance project in basis a standard or regulation. ~ 4+ years of experience in audits, compliance, and assessments based on ISO27001, ISO22301, NIS2, DORA, etc. ~ Experience with cybersecurity technologies (FW, DLP, IDS/IPS, EDR) and incident response. ~ Relevant degree (Computer Engineering, Telecommunications, or Master in Cybersecurity); Numerous benefits (Health Care Plan, Internet Connectivity, Life and Accident Insurances). ~ Free access to several training platforms. ~ Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime...). ~ Mid-Senior level Full-time IT Services and IT Consulting

📌 Governance Risk And Compliance Technical Specialist - Hybrid Madrid
🏢 Ust
📍 Madrid