Experteer Overview Las cualificaciones, habilidades y toda la experiencia relevante necesaria para este puesto se pueden encontrar en la descripción completa a continuación.

In this role you will strengthen Glovo’s global security posture within a fast-evolving regulatory landscape. You’ll bridge technical, legal, and business teams to translate complex requirements into practical controls. You’ll drive risk assessment, remediation, and security awareness programs across the organization.

This is a security-focused role at scale, with opportunities to influence certifications (PCI DSS, ISO 27001) and cross-functional collaboration. You’ll contribute to a security-first culture and help Glovo meet customer and regulatory expectations.

Compensaciones / Incentivos

- Develop and maintain security policies and procedures aligned with frameworks (ISO 27001, NIST, PCI DSS, GDPR, NIS2, EU AI Act)
- Lead security awareness programs to educate employees on best practices and compliance
- Maintain risk register, perform risk assessments, and drive remediation efforts
- Coordinate responses to customer security inquiries and due diligence questionnaires




- Monitor continuous security controls and support certification/re-certification processes (PCI DSS, ISO 27001, NIS2)
- Support internal assessments to identify gaps and coordinate remediation with auditors
- Act as liaison between technical teams, legal, audit, and business units to ensure unified security approach

Responsabilidades

- BA/BS in Computer Science, Information Systems, or similar field
- Professional security certifications (CISSP, CISM, CISA, ISO 27001 Lead Implementer or equivalent)
- Minimum 5 years xugodme of experience in security/GRC
- Strong knowledge of NIST, PCI DSS, GDPR, ISO 27001, NIS2
- Hands-on experience with GRC platforms (RSA Archer, SAP GRC, StandardFusion, ServiceNow, OneTrust)
- Experience with cloud security (AWS, Azure, GCP) and CCM
- Proven project management and ability to work with minimal direction
- Excellent communication and interpersonal skills
- Experience quantifying risk (e.g., FAIR)
- Experience delivering security awareness programs

Requisitos principales

•

📌 Security GRC Engineer (Barcelona)
🏢 Glovo
📍 Barcelona