GRC Security Expert

LEADtech

. Develop cybersecurity policies, procedures, and methodologies .

Posted 9/18/2026full-timeRemote • SpainJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and implementing cybersecurity policies and procedures aligned with ISO 27001, GDPR, and NIS2 requirements. Proficient in managing compliance projects, engaging stakeholders, and utilizing GRC platforms to support organizational goals.

Highest-signal resume keywords

ISO 27001 Project ManagementGRC Compliance ExperienceData Protection ConceptsStrong Written CommunicationVendor Security Assessments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Policy DevelopmentISO 27001:2022 KnowledgeData Retention ManagementVulnerability ManagementAuditing and ConsultingProject ManagementTroubleshooting and Issue ResolutionStakeholder EngagementRegulatory AlignmentData Protection Initiatives

Soft Skills

Excellent Organizational SkillsProactive Follow-UpIndependent Problem IdentificationEffective CommunicationTask Completion with Minimal Supervision

Tools & Technologies

AWSGCPAzureGRC PlatformsCISO AssistantVulnerability Management Tooling

Certifications & Qualifications

ISO 27001 Lead ImplementerISO 27001 AuditorCompTIA Security+CISACISM

Industry Keywords

GDPRNIS2IT AuditorComplianceData ProtectionPrivacy InitiativesVendor ReviewsInternal ProcessesExternal ProcessesCybersecurity Regulations

Tech Stack

Tools & technologies

AWSAzureCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Develop cybersecurity policies, procedures, and methodologies
Implement applicable standards and regulations
Manage ISO 27001 projects, vulnerability follow-up, and vendor reviews
Align security work with ISO 27001, GDPR, and NIS2 requirements
Develop data protection and privacy initiatives
Identify, troubleshoot, and resolve issues affecting internal and external processes
Manage multiple projects while maintaining quality and regulatory alignment
Engage product, engineering, marketing, and other stakeholders to gather requirements and evaluate options
Develop tools and processes supporting organizational goals

Requirements

What you’ll need

Degree in Computer Science, Telecommunications, Law or equivalent practical experience
1 or 2 years of experience in GRC, compliance, IT auditor, or a related role
Working knowledge of ISO 27001:2022, including clause structure, Annex A controls, and SoA
Experience as an auditor, consultant, or implementation specialist
Working knowledge of data protection concepts, including data retention, PIAs, and RATs
Basic familiarity with AWS, GCP, or Azure and IAM concepts such as least privilege, MFA, key rotation, and orphaned accounts
Strong written communication in English and Spanish
Excellent organizational skills for tracking findings, tickets, and evidence requests across teams
Proactive ability to follow up with teams, gather evidence, identify overdue deadlines, and drive tasks to completion with minimal supervision
Ability to independently identify gaps or deviations and escalate them in a timely manner
ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISA, or CISM certification in progress or completed viewed favorably
Exposure to NIS2 or other EU cybersecurity regulation
Familiarity with GRC platforms such as CISO Assistant or vulnerability management tooling
Prior experience supporting vendor/third-party security assessments

Benefits

Comp & perks

Competitive compensation package
Flexible hours and flextime
Health insurance
Training
Personalized internal training
Annual budget for external learning opportunities
Option to work fully remote or from the Barcelona office
Free Friday afternoons with a 7-hour workday
35-hour workweek in July and August
Top-tier private health insurance including dental and psychological services
25 days of vacation
Birthday off
Flexible vacation options with no blackout days
Free coffee, fresh fruit, snacks, game room, and rooftop terrace at the Barcelona office
Ticket restaurant vouchers
Nursery vouchers
Full-time permanent contract