Ingeniero/a de senior de GRC

GMV Insyen AG; Bogotá; Hybride; COP 291 923 000 - 421 667 000; Plein temps

Avantages offerts par ce poste

Hybrid work model

8 weeks remote per year

Flexible hours and summer Fridays

Career development and language学习支持

Wellbeing program and private health

Résumé du poste

GMV Spain is seeking a senior cybersecurity professional to join our Bogotá offices as a CISO as a Service. You will lead GRC activities, advise clients on strategy, and coordinate cross-functional security initiatives in an international environment.

The role requires 5+ years in cybersecurity, strong knowledge of ISO 27001/NIST, and the ability to engage with clients and security committees. English at B2+ and a degree in engineering or computer science are essential.

Qualifications

• 5+ years in cybersecurity, with strong GRC background.
• Experience advising clients and participating in security committees.
• Knowledge of security frameworks (ISO 27001, NIST, ENS).
• English proficiency at B2 level or higher.

Responsabilités

• Act as CISO as a Service, advising on defining and evolving the client's cybersecurity strategy.
• Lead Governance, Risk and Compliance activities.
• Define, review, and maintain security policies, procedures, standards, and frameworks.
• Identify and assess security risks, proposing mitigation plans and monitoring their implementation.
• Coordinate with business and technology teams to integrate security into processes.
• Oversee compliance with regulations, standards, and regulatory requirements.
• Collaborate in incident management, CERT capabilities, and business continuity planning.
• Prepare executive reports, metrics, and KPIs for management and security committees.
• Participate in international projects with distributed teams.

Connaissances

GRC experience

Cybersecurity

Client engagement

Leadership

English B2

Formation

Engineering / Computer Science / Telecommunications degree

Certifications: CISM CRISC CISA ISO 27001 Lead Implementer/Auditor

Description du poste

You will join a technology company leading strategic projects to protect the information and systems of leading organizations.

Your mission will be to act as CISO as a Service, providing strategic and operational guidance on information security, risk management, and regulatory compliance for a leading international client, working from our Bogotá offices.

You will take on a highly autonomous and responsible role, combining expertise in Governance, Risk and Compliance (GRC) with the ability to engage with clients, define security strategies, and coordinate cybersecurity initiatives.

In addition, you will work in an international environment, bringing a cross-functional security perspective and contributing to the continuous improvement of the organization's cybersecurity capabilities.

We like to get straight to the point, so we'll tell you what you won't find online. If you'd like to learn more about us, visit the GMV website.

WHAT CHALLENGE WILL YOU TAKE ON?

• Act as CISO as a Service, advising the client on defining and evolving their cybersecurity strategy.
• Lead Governance, Risk and Compliance (GRC) activities.
• Define, review, and maintain security policies, procedures, standards, and frameworks.
• Identify and assess security risks, proposing mitigation plans and monitoring their implementation.
• Coordinate with business and technology teams to ensure security is integrated into corporate processes.
• Oversee compliance with applicable regulations, standards, and regulatory requirements.
• Collaborate in incident management, CERT capabilities, and business continuity and disaster recovery planning.
• Prepare executive reports, metrics, and KPIs for management and security committees.
• Participate in international projects and collaborate with geographically distributed teams.

WHAT ARE WE LOOKING FOR IN OUR TEAM?

We are looking for a senior professional with experience in Governance, Risk and Compliance (GRC) and the ability to act as a trusted cybersecurity advisor to clients. Essential requirements include:

• Degree in Engineering, Computer Science, Telecommunications, or a related field.
• Solid experience (5+ years) in cybersecurity, particularly in GRC.
• Experience in risk management and defining security controls.
• Knowledge of security frameworks and standards (ISO 27001, NIST, ENS, or similar).
• Experience working directly with clients and participating in security committees.
• General knowledge of IT technologies and architectures.
• English proficiency at B2 level or higher.

We will particularly value:

• Technical knowledge of incident management, CERT capabilities, and business continuity.
• Certifications such as CISM, CRISC, CISA, ISO 27001 Lead Implementer/Auditor, or similar.
• Knowledge of Cloud environments and security technologies.
• Experience in international projects or CISO as a Service delivery models.
• Leadership skills, autonomy, and a client-oriented mindset.

WHAT DO WE OFFER?

• Hybrid working model and 8 weeks of remote work per year from outside your usual geographical area.
• Flexible working hours with flexible start and finish times, plus shorter working hours on Fridays and during the summer.
• Personalized career development plan, training opportunities, and support for language learning.
• Competitive compensation with regular salary reviews, flexible benefits, and discounts on leading brands.
• Wellbeing Program: private health, dental, and accident insurance; free fruit and coffee; physical, mental, and financial wellbeing initiatives, and much more!

Throughout our recruitment process, you will always have direct contact—by phone and in person or online—with our Talent Acquisition team. We will never ask you to make bank transfers or provide bank card details. If someone contacts you through a different process, please get in touch with the person responsible for this recruitment process.

We promote equal employment opportunities and are committed to fostering an inclusive and diverse workplace.

WHAT ARE YOU WAITING FOR? JOIN US!

If you have any questions, please don't hesitate to contact Clara Sánchez Lobato, the recruiter responsible for this vacancy.