Global GRC & Cybersecurity Specialist

Pluxee España; Madrid; Presencial; EUR 60.000 - 80.000; Jornada completa

Descripción de la vacante

Pluxee España seeks a GRC Analyst to drive governance across cybersecurity and compliance. You will develop and maintain policies, align with ISO 27001, NIST, GDPR, and other frameworks, and support continuous risk mitigation in a multinational environment.

You will monitor KPIs/KRIs, prepare reports for senior leadership, and collaborate with IT, Privacy, Legal, and HR to ensure cohesive governance. English and Spanish fluency is required, with strong communication and documentation skills.

Formación

• Bachelor’s degree in Risk Management, Business Administration, Cybersecurity, or related field.
• 3–5 years of relevant experience in GRC, cybersecurity compliance, or information risk management in multinational or regulated environment.
• Knowledge of ISO 27001, NIST, GDPR, LGPD, DORA.
• Familiarity with GRC tools and platforms such as OneTrust, Sandas GRC, GlobalSuite.
• Strong analytical and documentation skills.
• Excellent communication and ability to interact with multiple stakeholders (IT, HR, Compliance, C level, Cybersecurity committee members).
• Proficiency in Microsoft 365.

Responsabilidades

• Develop, update, and maintain cybersecurity and compliance-related policies, procedures, and standards.
• Ensure alignment with global regulatory and industry frameworks (ISO 27001, NIST, GDPR, LGPD, DORA).
• Support continuous improvement and application of Pluxee’s GRC framework.
• Track and analyze cybersecurity KPIs and KRIs, providing data-driven insights to senior stakeholders.
• Contribute to regular internal reporting and audits for visibility on compliance efforts.
• Collaborate with IT, Privacy, Legal, and Compliance for integrated governance.
• Support business units in applying policies and resolving GRC-related questions.

Conocimientos

Analytical skills

Stakeholder communication

Microsoft 365

English and Spanish

GRC knowledge

GRC tools familiarity

Educación

Bachelor’s degree in Risk Management, Business Administration, Cybersecurity, or related field

CRISC certification

ISO 27001 Lead Implementer

CISA

Equivalent certifications

Herramientas

OneTrust

Sandas GRC

GlobalSuite

Descripción del empleo

Pluxee España seeks a GRC Analyst to drive governance across cybersecurity and compliance. You will develop and maintain policies, align with ISO 27001, NIST, GDPR, and other frameworks, and support continuous risk mitigation in a multinational environment.

You will monitor KPIs/KRIs, prepare reports for senior leadership, and collaborate with IT, Privacy, Legal, and HR to ensure cohesive governance. English and Spanish fluency is required, with strong communication and documentation skills.