Governance risk and Compliance Technical Specialist - Hybrid Madrid
More in detail, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and a presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.
We are looking for a GRC Specialist contribute for a project with one of our integral customers in the cybersecurity team.
4 years' experience in audits and compliance and assessments based on national and international standards (ISO27001, ISO22301, ENS, NIST, DORA, NIS2)
It is also desirable knowledge in ENS, ISO 27005, ISO22301, ISO 42001, NIST CSF 2.0, NIST, SOC 2, GDPR, DORA, NIS2, CMMC 2.0
Proficiency with a variety of instruments for assessing and controlling risk (ex. Experience in implementation of best practices, compliance with information security policies and standards.
Experience related to Cybersecurity ecosystem, deployment experience of security technologies.
Computer Engineering/Telecommunications and/or Master in Cybersecurity It is also desirable and will be considered to hold certifications such as CISM, CISSP, CISA, ISO/IEC 27001 Lead Auditor / Lead Implementer.
Domain Examples: BCMS, ISMS, Risk assessment (AARR & BIAs), GAP Analysis, Incident management, Awareness activities, Data Privacy, etc.)
Independently handle (with very minimal guidance from the supervisors)



internal audits or GAP Analysis to ensure compliance with security standards (ex. Responsible for the effective documentation of projects individually.
Point out the non-conformance areas and suggest measures to improve the information security individually.
Ensure that risk management is effectively conducted across the organization, business processes and information systems.
Coordinate information security awareness training programs for all the employees, contractors and approved system users.
Coordinate and Review the technical assessments of IT systems and processes to identify potential risks. Submit recommendations to mitigate any risks identified and ensure controls that they are implemented.
Design, plan and execute the Cybersecurity activities.
Prepare detailed description of user requirements and steps required to perform a compliance project in basis a standard or regulation.
4+ years of experience in audits, compliance, and assessments based on ISO27001, ISO22301, NIS2, DORA, etc.
Experience with cybersecurity technologies (FW, DLP, IDS/IPS, EDR) and incident response.
Relevant degree (Computer Engineering, Telecommunications, or Master in Cybersecurity); Numerous benefits (Health Care Plan, Internet Connectivity, Life and Accident Insurances).
Free access to several training platforms.
Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime...).
Mid-Senior level
Full-time
IT Services and IT Consulting

📌 Compliance Technical Specialist (Madrid)
🏢 Ust
📍 Madrid