Experteer Overview
In this role you will strengthen Glovo’s security posture and navigate a complex regulatory landscape. You will bridge technical, legal, and business stakeholders to translate demands into practical controls. You’ll lead risk assessment, remediation, and security awareness programs across the organization. This role sits at the intersection of policy, audits, and security engineering, with a focus on scalable, compliant solutions that enable growth.

Compensaciones / Ventajas
• Develop and maintain security policies aligned with ISO 27001, NIST, PCI DSS, GDPR, NIS2, and EU AI Act
• Lead security awareness programs to educate employees on best practices and compliance
• Assess risks, track remediation, maintain a risk register, and monitor remediation status
• Coordinate responses to customer security inquiries and due diligence questionnaires (e.g., SIG, CAIQ) and review security-related contracts
• Design and implement processes and tools for continuous security monitoring to ensure policy adherence
• Assist with end-to-end security certifications (PCI DSS, ISO 27001, NIS2) and recertifications
• Identify gaps and non-compliance in security controls through internal assessments




• Support audits by preparing documentation and coordinating with auditors, tracking findings and remediation
• Serve as liaison between technical teams, legal, internal audit, and business units to ensure unified security posture

Responsabilidades
• BA/BS in Computer Science, Information Systems, or similar
• Professional security certifications (CISSP, CISM, CISA, ISO 27001 Lead Implementer or equivalent)
• Minimum 5 years of relevant experience
• Strong understanding of security control frameworks (NIST, PCI DSS, GDPR, ISO 27001, NIS2)
• Hands-on experience with GRC platforms (RSA Archer, SAP GRC, StandardFusion, ServiceNow, OneTrust)
• Ability to manage multiple projects with minimal direction
• Strong problem solving, analytical, and communication skills
• Experience with cloud compliance (AWS, Azure, GCP) and CCM
• Experience with risk quantification methods (e.g., FAIR)
• Experience delivering security awareness programs
• Nice-to-haves: automation skills (e.g., Python), BCP/DR planning, EU AI Act familiarity

Requisitos principales
•

📌 Security GRC Engineer (Barcelona)
🏢 Delivery Hero
📍 Barcelona