Cybersecurity Grc Analyst

Satlantis; País Vasco; Híbrido; EUR 42.000 - 62.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Campus perks (UPV/EHU)

Flexible working hours

Descripción de la vacante

Satlantis, empresa vasca de tecnología espacial, busca un Analista GRC para fortalecer la gobernanza, el riesgo y el cumplimiento de ciberseguridad. Colaborarás estrechamente con IT, ciberseguridad y operaciones para implementar controles y evidencias.

Se requiere experiencia en ENS/ISO 27001, NIS2 y GDPR, y capacidad para gestionar documentación, auditorías y dashboards de gobernanza para la alta dirección.

Formación

• Conocimiento práctico de marcos de seguridad y cumplimiento (ENS, ISO 27001, NIS2 y GDPR).
• Experiencia manteniendo documentación estructurada, evidencia de control y registros de riesgos.
• Comprensión de operaciones SOC, gestión de incidentes y recuperación ante desastres.

Responsabilidades

• Apoyar la gobernanza, gestión de riesgos y cumplimiento de ciberseguridad e IT.
• Coordinar auditorías internas y externas y gestionar evidencia de auditoría.
• Monitorear indicadores y preparar informes para la dirección de IT y ciberseguridad.

Conocimientos

GRC

Seguridad de la información

Gestión de riesgos

Cumplimiento

Educación

Título Superior en Ciberseguridad o campo relacionado

Herramientas

ISO 27001

NIS2

GDPR

Descripción del empleo

Descripción del trabajo

At SATLANTIS, we design advanced space technologies to tackle global challenges from above. Our satellites are conceived, designed, and built to deliver reliable, high-performance Earth observation data in demanding orbital environments.

As a Cybersecurity GRC Analyst , you will help strengthen the governance, risk management, and compliance foundations that protect our technology, information, and business operations. Working closely with IT, Cybersecurity, business stakeholders, suppliers, and external partners, you will contribute to ensuring that security requirements are effectively implemented, monitored, evidenced, and continuously improved.

What’s in it for you

• Real impact on cybersecurity governance : Your work will directly contribute to strengthening the security and resilience of a growing space technology organization.
• Professional growth in a cutting-edge sector: Develop your expertise in cybersecurity governance, risk management, compliance, and information security within the space industry.
• Flexible working hours: Because balance and trust are part of how we work.
• Young, dynamic environment : Join a proactive team where autonomy, innovation, and collaboration drive our daily routine.
• Private health insurance: Your wellbeing comes first, with comprehensive coverage.
• Campus perks: Discounts at gym and restaurants on the UPV/EHU campus, plus fresh fruit, great coffee, and a motivating work atmosphere.

Your mission

Your mission will be to support the effective governance, risk management, and compliance of SATLANTIS’ cybersecurity and information security environment.

Through structured coordination, monitoring, documentation, and continuous improvement, you will help ensure that security requirements are implemented, risks are tracked, audit commitments are addressed, and cybersecurity performance remains visible to decision-makers.

Your main responsibilities will be:

• Support the maintenance and continuous improvement of ENS High compliance and the ISMS , including the statement of applicability, security policies, standards, procedures, records, and control evidence.
• Support the oversight of the external SOC service and vulnerability management process, monitoring service performance, escalations, asset coverage, risk classification, remediation deadlines, and outstanding actions.
• Coordinate internal and external audits, managing audit evidence and maintaining the register of findings, observations, and non-conformities, together with their corresponding corrective action plans and closure status.
• Coordinate the maintenance and testing of IT continuity and disaster recovery plans with the relevant service and business owners.
• Support supplier security assessments, contractual security reviews, supplier SLA monitoring, remediation activities, and customer cybersecurity questionnaires and evidence requests.
• Conduct and maintain technology risk assessments , propose treatment actions, and monitor their implementation, while supporting the application and monitoring of the information classification scheme.
• Support incident notification and regulatory deadline tracking related to ENS, NIS2, and GDPR.
• Prepare periodic cybersecurity governance, risk, and compliance dashboards and reports for the Head of IT & Cybersecurity.

What will set you up for success

• Technical foundation: You hold a Higher Vocational Qualification, University Degree, or equivalent professional experience in Cybersecurity, Information Technology, Telecommunications, Computer Science, Risk Management, Law with a technology specialization, or a related field.
• Experience and knowledge:
• Basic practical knowledge of security and compliance frameworks such as ENS, ISO 27001, NIS2, and GDPR.
• Experience maintaining structured documentation, control evidence, risk registers, or audit records, together with a general technical understanding of IT infrastructure, networks, identity, endpoints, cloud services, and cybersecurity controls.
• A working understanding of SOC operations, incident management, vulnerability management, and remediation processes will help you monitor performance, track actions, and challenge deviations when needed.
• Basic understanding of technology risk assessment and supplier and supply-chain security assessment processes will help you contribute to managing cybersecurity risks across the organization.
• Autonomy and Teamwork : Ability to work independently and in a team.
• Communication skills : Native or equivalent Spanish and technical English.
• Preferred skills:
• Experience participating in ENS or NIS2 implementation, maintenance, or audit activities.
• Familiarity with Microsoft 365 security and compliance technologies, including Entra ID, Intune, Defender, or Purview, and AWS.

Ready to strengthen cybersecurity in the space industry?

If you’re excited about turning cybersecurity requirements into practical improvements and contributing to the security and resilience of space technologies, this is your chance.