Experteer Overview

In this role you will lead cybersecurity assessments, audits, and GRC projects across key frameworks (ISO 27001, NIST CSF, GDPR, NIS2, DORA, PCI DSS, ENS, ISO 22301), advising clients on compliance and security governance. You will engage with stakeholders across multidisciplinary teams and contribute to the evolution of GRC services.

This position blends cybersecurity expertise with consulting, project coordination and client-facing responsibilities in a hybrid Bilbao/Vitoria area setup. You will help organizations strengthen their security posture and risk management in a dynamic regulatory landscape.

Compensaciones / Incentivos

- Define scope of cybersecurity assessments and audits with regulatory alignment
- Review technical documentation, policies, and control frameworks
- Conduct stakeholder interviews and collect evidence for assessments
- Identify compliance gaps and provide remediation guidance
- Advise clients on information security standards and best practices
- Participate in GRC projects across PCI DSS, NIST CSF, ISO 27001, ENS, ISO 22301, GDPR, NIS2, DORA
- Prepare reports, findings and project deliverables
- Coordinate and manage cybersecurity and GRC projects with cross-functional teams




- Contribute to development and improvement of GRC products and services
- Proactively address client challenges to improve governance and risk processes
- Maintain a proactive, autonomous working style and strong communication with stakeholders

Responsabilidades

- A higher technical degree in Engineering, IT, Telecommunications or a related field
- At least 5 years of cybersecurity experience, including 3+ years in GRC
- Solid knowledge of cybersecurity principles and technologies
- Experience with security and compliance frameworks/regulations (ISO 27001, NIST CSF, PCI DSS, ENS, ISO 22301, GDPR, NIS2, DORA)
- Knowledge of cybersecurity technologies and deployment projects
- Experience in project management, team coordination and stakeholder management
- Professional proficiency in English (written and spoken)
- Strong analytical, interpersonal and communication skills
- Proactive, autonomous work style, critical thinking and problem-solving
- Collaborative mindset and commitment to continuous improvement
- Creativity in practical cybersecurity and compliance solutions

Requisitos principales

•

📌 GRC Senior Consultant (Zamudio)
🏢 Thales Group
📍 Zamudio