Job Description About Adevinta Information Services At Adevinta Information Services, we build and operate some of Spain's largest digital marketplaces, including InfoJobs, Milanuncios, Coches.net and Motos.net.

We're building a modern, AI-first cybersecurity organisation from the ground up following our separation from the integral organisation. This is a unique opportunity to shape governance, compliance and cyber risk for a fast-moving technology company.

We're looking for a proactive and pragmatic GRC Manager who enjoys working close to the business and turning governance into an enabler rather than a blocker.

What you'll do You will own the Governance, Risk & Compliance function across Adevinta Information Services and support our marketplaces in maintaining a strong security posture.

Responsibilities Include

Own the Information Security Management System (ISMS)

Lead ISO 27001, ENS and other security certifications and audits

Coordinate cybersecurity assessments from internal stakeholders, EQT and external auditors

Drive Third-Party Risk Management across suppliers and strategic partners

Define and maintain security policies, standards and governance processes

Lead security awareness and phishing programmes across the company

Track security risks and remediation plans with business owners





Build executive dashboards and security KPIs for senior leadership

Coordinate Business Continuity and security governance activities

Partner with Legal, Privacy, Procurement, Engineering and Product teams to embed security into business processes

Help scale governance through automation and AI where possible

What we're looking for

Experience leading GRC or Information Security Governance in a technology company

Strong understanding of ISO 27001, ENS, NIST or similar frameworks

Experience managing external audits

Experience with Vendor Risk Management

Excellent communication skills with technical and non-technical stakeholders

Pragmatic mindset focused on reducing business riskAbility to work autonomously and drive initiatives end-to-end

Nice To Have

Experience in SaaS, cloud-native or digital marketplace environments

Experience with GRC platforms

Security certifications (CISM, CRISC, ISO Lead Auditor...)

Why join us?

Build a cybersecurity organisation from scratch

High ownership and impact

Work with modern cloud technologies

AI-first security strategy

Flexible hybrid environment

International technology company

Competitive salary and benefits

#J-18808-Ljbffr

📌 Governance, Risk & Compliance Manager (Barcelona)
🏢 coches.net
📍 Barcelona