Experteer Overview
As Technology GRC Lead, you own Tech's risk and compliance posture, guiding audits, controls, and policy to support regulatory obligations. You consolidate risk data, maintain the risk register, and provide data-driven updates to executive risk committees. You collaborate with Internal Audit, Compliance and IT Risk to drive remediation and governance. You translate regulatory deadlines into engineering backlogs and enable automated compliance through tooling and CI/CD practices.

Compensaciones / Ventajas
• Own Technology GRC programme and drive compliance posture with a single source of truth for risk metrics
• Centralise audit, risk, and compliance inquiries and coordinate response strategies across Technology and Engineering
• Maintain Technology risk register in AuditBoard with risk ratings, control mappings, and action plans
• Represent Technology at risk committees; deliver KPI, risk and remediation reporting
• Lead internal and external audits end-to-end from scoping to closure and remediation
• Enforce remediation timelines and escalate when targets slip
• Align Technology control framework with ISO 27001,



NIST, CIS and regulatory mandates
• Policy governance for Technology policies, standards and SOPs
• Translate findings into concrete backlog items; align with Technology roadmaps and resource planning
• Collaborate on Compliance as Code to automate control validation and evidence collection
• Lead Third-Party Risk Management including vendor security assessments and contract standards

Responsabilidades
• 3+ years in IT/Cybersecurity GRC, IT Risk, or IT Audit in a regulated environment
• End-to-end ownership of technology audits and risk programmes
• Practical knowledge of ISO 27001, NIST, CIS and ITGCs (access, change, operations)
• Technical credibility in cloud (AWS/GCP/Azure), IAM, CI/CD, and secure SDLC
• Ability to present risk metrics to risk committees and executives
• Strong stakeholder management with diplomatic assertiveness
• Excellent English communication, bridging technical and non-technical audiences

Requisitos principales
•

📌 Technical Governance Risk & Compliance Specialist (Madrid)
🏢 Ebury
📍 Madrid