Global GRC InfoSec Specialist

Axpo Group; Madrid; Híbrido; EUR 45.000 - 65.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Meal allowances

Health insurance

Gym coverage

Training courses

Internet compensation

Descripción de la vacante

Axpo Group is seeking a Governance, Risk and Compliance professional to shape and strengthen governance practices across the group. You will coordinate information security initiatives, maintain policies, and drive risk reporting while collaborating with IT, security, legal, and business teams.

The role focuses on developing documentation, managing audits, and providing management updates. A strong knowledge of ISO/IEC 27001, NIST, or NIS2 and a delivery‑oriented mindset are valued.

Formación

• Experience in governance, compliance, risk management, audit, information security, or project coordination.
• Understanding of cybersecurity principles and governance frameworks (ISO/IEC 27001, NIST, or NIS2).
• Strong organisational skills to manage multiple topics and drive actions.
• Experience preparing reports and documentation; exposure to GRC tools or collaboration platforms.

Responsabilidades

• Support and coordinate information security governance initiatives across the Group.
• Maintain and improve cybersecurity policies, standards, procedures, and related documentation.
• Coordinate compliance activities, audits, evidence collection, and follow-up actions.
• Track information security risks, remediation plans, and governance activities through structured reporting.
• Prepare dashboards, presentations, and management updates for stakeholders.
• Collaborate with IT, security, legal, audit, and business teams to strengthen security governance practices.

Conocimientos

Governance & Compliance

Risk management

Audit

Information security

Project coordination

Educación

Bachelor’s degree in IT/IS

Herramientas

GRC tools

Descripción del empleo

Axpo Group is seeking a Governance, Risk and Compliance professional to shape and strengthen governance practices across the group. You will coordinate information security initiatives, maintain policies, and drive risk reporting while collaborating with IT, security, legal, and business teams.

The role focuses on developing documentation, managing audits, and providing management updates. A strong knowledge of ISO/IEC 27001, NIST, or NIS2 and a delivery‑oriented mindset are valued.