Compliance

• Design, implement, and maintain Data Loss Prevention policies across Exchange, SharePoint, OneDrive, Teams, and endpoints
• Tune DLP policies, handle false positives, and investigate incidents
• Own sensitivity label setup, retention policies, and records management
• Support eDiscovery, audit log searches, and legal holds with Compliance and Legal
• Prepare and lead Purview stakeholder meetings, explain technical options and impacts, align interests, and turn decisions into next steps
• Automate reporting, policy rollout, and monitoring with PowerShell
• Handle L3 escalations, write documentation and runbooks, and coach L1/L2 colleagues
• Maintain the hybrid Exchange environment, including Exchange Server 2016/2019 and Exchange Online
• Manage connectors, mail flow, certificates, and Entra Connect synchronization
• Troubleshoot complex mail flow and client issues across Outlook, OWA, and EWS
• Maintain email authentication and security using SPF, DKIM, DMARC, and Defender for Office 365
• Support mailbox moves and cleanup during the reduction of on-premises Exchange

M365 Engineer – Purview Compliance, Messaging

• Analizar novedades normativas y su impacto en bancos, aseguradoras y gestoras de activos
• Elaborar y/o validar modelos de riesgo financieros y extra-financieros
• Realizar levantamiento de procesos y proponer soluciones para mejorar la eficiencia operativa
• Definir mapas de riesgo y KPIs de medición y reporting
• Elaborar documentación de gobierno y reporting, incluyendo informes de seguimiento e ICAAP
• Diseñar e implementar estrategias de transformación funcional y tecnológica
• Participar en oficinas de gestión de proyecto (PMO), coordinando equipos y asegurando la calidad y los plazos de los entregables
• Incorporar criterios ESG en procesos de gestión y toma de decisiones
• Analizar la viabilidad de nuevos modelos de negocio, como neobanca, Fintech, Insurtech y criptomonedas
• Ayudar a elaborar y defender propuestas comerciales

Senior Consultant, Risk & Regulatory

• Participate in regulatory processes to obtain market clearances through health ministries and regulatory authorities
• Support new claim submissions and product CE marking activities
• Ensure regulatory compliance in regions where medical devices are marketed, including the European Union, the United States, Japan, Australia and South Korea
• Support preparation and submission of medical device technical files and cosmetic product dossiers
• Ensure regulatory deliverables meet required quality standards and deadlines
• Coordinate workflows with colleagues and internal and external stakeholders
• Stay up to date with relevant legislation and regulatory requirements
• Support maintenance and development of Quality Management Systems, including ISO 13485 and MDSAP
• Obtain, update and maintain regulatory approvals worldwide for medical devices and cosmetic products

Regulatory Affairs Officer

• Lead the creation, revision, review, agreement, and maintenance of Investigational Medicinal Product (IMP) and Calibration Labeling
• Collaborate with Regulatory Affairs, Clinical Operations, Quality, Contract Research Organizations, Contract Manufacturing Organizations, translation vendors, artwork vendors, and packaging vendors
• Ensure label content reflects approved protocol requirements, product characteristics, storage conditions, and country-specific requirements
• Ensure compliance with local and regional regulations and internal policies across the United States, European Union, United Kingdom, Australia, Canada, Asia-Pacific, and other participating countries
• Provide labeling expertise during protocol development, clinical study start-up, amendments, and country expansion
• Coordinate translation activities and verification of multilingual labeling content
• Coordinate artwork review and approval in the compliance system
• Manage version control and change management for IMP documentation
• Support IMP labeling submissions or notifications where required
• Evaluate new regulatory requirements and industry trends and assess impacts on studies
• Support regulatory inspections and audits with IMP documentation and subject matter expertise
• Serve as regulatory point of contact for IMP labeling, independently resolving issues and escalating complex matters
• Maintain efficient labeling processes using standardized templates, checklists, and workflows
• Identify process improvements, best practices, and tools
• Assist with other clinical or commercial labeling activities and special projects

Manager, Regulatory Affairs – Clinical Labeling

• Own and continuously improve physical security across Spanish facilities, including production areas, engineering environments, offices, and storage locations
• Conduct facility security risk assessments and translate findings into practical security measures
• Manage CCTV, intrusion detection, electronic access control, and other physical security systems
• Coordinate Security Operations Center monitoring and ensure effective incident response
• Lead security incident response, investigations, reporting, and emergency procedures
• Manage relationships and contracts with licensed security providers, define guarding requirements, and monitor service quality and compliance
• Ensure security personnel meet applicable Spanish requirements, including valid TIP credentials where required
• Support compliance with Spanish classified-information protection requirements and security requirements established by Spanish defense authorities
• Work across ENS, ISO/IEC 27001, ISO 22301, NIS2, GDPR, export control, and defense-related regulations
• Support security audits, compliance reviews, regulatory inspections, and interaction with government authorities
• Secure the supply chain through procurement and logistics procedures for sensitive technologies, equipment, materials, and components
• Support supplier security requirements and align logistics activities with export control and defense security obligations
• Build security culture through awareness programs, training, drills, and incident response exercises
• Ensure teams understand sensitive-information handling, security procedures, and incident reporting

Security & Compliance Manager

• Lead the definition and execution of AI Security Governance strategies.
• Translate AI security requirements into practical governance processes across the full AI lifecycle.
• Develop executive-level presentations and strategic communications.
• Bridge security and business stakeholders by translating risks, controls, recommendations, and governance expectations into actionable plans.
• Coordinate AI Security Governance programs, including workplans, milestones, dependencies, risks, stakeholder alignment, steering committees, and delivery activities.
• Facilitate workshops and stakeholder discussions to define ownership models, escalation paths, governance processes, and implementation priorities.
• Drive governance adoption and organizational enablement through guidance, training materials, communication plans, and frameworks.
• Monitor program performance and continuous improvement, providing reporting, insights, recommendations, and governance metrics to leadership teams.
• Work closely with the AI Security Governance Architect.

AI Security Governance Consultant

• Conduct complex internal and/or external audits for compliance with quality assurance processes, standards, global regulatory guidelines, and client contractual obligations
• Identify issues affecting the quality or integrity of clinical research programs
• Determine root causes of non-conformance and develop strategies to address issues
• Perform technical document reviews and other GxP activities supporting clinical development programs
• Provide audit reports to management
• Plan and deliver quality services for contracted quality assurance audits, internal site audits, laboratory audits, and file audits
• Lead process and quality improvement initiatives
• Develop compliance-management tracking tools and materials and analyze trends
• Mentor less experienced staff
• Serve as project lead for group projects
• Create formal networks with key contacts across the department

Compliance Manager

• Own Custody & Compliance end-to-end, including strategy, roadmap, priorities, budget, and business results.
• Define and track key metrics for deposits, withdrawals, KYC, fraud, and customer activation.
• Improve customer onboarding and money movement speed and conversion.
• Balance risk prevention with customer experience and commercial impact.
• Build financial and operational models and make data-driven business decisions.
• Work directly with C-level stakeholders on strategy and priorities.
• Own custody infrastructure and relationships with custody providers.
• Own deposit and withdrawal flows across the GoMining ecosystem.
• Improve transaction processing speed, reliability, and success rates.
• Manage incidents and critical issues related to customer funds.
• Own operational implementation of KYC, AML, and Travel Rule requirements.
• Build scalable compliance operations, including case management, decision SLAs, escalation processes, and operational workflows.
• Analyze false positives and missed fraud cases.
• Develop fraud prevention guardrails and data-driven suspicious-activity detection.
• Own relationships with custody, KYC, AML, and infrastructure providers; negotiate terms and drive integrations.
• Lead a dedicated engineering team and work directly with the Tech Lead.
• Own priorities, backlog, releases, delivery, team goals, hiring, development, and performance decisions.
• Use AI and automation to keep the team lean and increase execution speed.

General Manager – Custody & Compliance

• Asesorar a responsables CIO/CTO, CISO y CRO para generar entornos digitales confiables y seguros
• Definir estrategias y modelos operativos para responder a riesgos tecnológicos y de ciberseguridad
• Valorar y mitigar riesgos de ciberseguridad derivados de la transformación digital
• Determinar la madurez y confianza de entornos IT e identificar riesgos de Seguridad, Privacidad, Continuidad, Datos, Cambios tecnológicos y Proveedores
• Definir y gestionar planes de acción para riesgos IT
• Analizar tecnologías emergentes desde la perspectiva de los riesgos IT asociados
• Realizar evaluaciones de cumplimiento y asesoramiento técnico
• Supervisar la implantación de normativas de ciberseguridad
• Alinear prácticas empresariales con estándares y frameworks de referencia
• Revisar y modificar políticas y procedimientos para asegurar el cumplimiento normativo
• Realizar revisiones y auditorías sobre soluciones de seguridad y entornos IT
• Definir e implantar KPIs y KRIs de ciberseguridad y otros riesgos IT
• Generar cuadros de mando de riesgos e indicadores para la toma de decisiones
• Ejecutar la función de CISO externo y liderar la protección frente a ciberataques

Senior Privacy Governance & Compliance

• Implement product stewardship and regulatory policies, procedures, processes, and initiatives across the region
• Monitor regional regulatory activities and assess new regulations that may impact Axalta
• Provide guidance on new standards, legislation, and business impacts
• Develop product registration strategies for new product introduction with global and regional teams
• Ensure compliance with regional and local regulations covering hazard communication, substance registrations, reporting, and related requirements
• Respond to customer-driven product stewardship needs and support regional operations
• Represent Axalta in regional industry associations and government agencies
• Provide functional and program guidance, training, and development for regional PS&R staff
• Investigate and report product stewardship incidents, identify root causes, and recommend preventive measures
• Develop and track leading and lagging performance indicators
• Identify and implement best practices, efficient tools, standardized practices, and processes
• Ensure information systems and tools support product and global chemical data management and reporting

Compliance jobs in Spain