Governance, Risk & Compliance Manager

coches.net; Barcelona; Híbrido; EUR 70.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work policy

Competitive salary

Descripción de la vacante

Adevinta Information Services is building a modern, AI-first cybersecurity organization. We seek a proactive GRC Manager to own governance, risk and compliance and enable the business to move securely and efficiently.

You will lead the ISMS, oversee ISO 27001 and other certifications, coordinate audits, and drive risk management across our marketplaces. This role demands collaboration with Legal, Privacy, Procurement, Engineering and Product teams.

Formación

• Experience leading GRC or information security governance in a technology company.
• Strong understanding of ISO 27001, ENS, NIST or similar frameworks.
• Experience managing external audits.
• Experience with Vendor Risk Management.
• Excellent communication skills with technical and non-technical stakeholders.
• Pragmatic mindset focused on reducing business risk and autonomous initiative.

Responsabilidades

• Own the Governance, Risk & Compliance function across Adevinta Information Services and support marketplaces in maintaining a strong security posture.
• Lead ISO 27001, ENS and other security certifications and audits.
• Coordinate cybersecurity assessments from internal stakeholders, EQT and external auditors.
• Drive Third-Party Risk Management across suppliers and strategic partners.
• Define and maintain security policies, standards and governance processes.
• Lead security awareness and phishing programmes across the company.
• Track security risks and remediation plans with business owners.
• Build executive dashboards and security KPIs for senior leadership.
• Coordinate Business Continuity and security governance activities.
• Partner with Legal, Privacy, Procurement, Engineering and Product teams to embed security into business processes.
• Help scale governance through automation and AI where possible.

Conocimientos

GRC leadership

ISO 27001

Security audits

Vendor risk management

Effective communication

Automation/AI in governance

Herramientas

GRC platforms

Descripción del empleo

Job Description

About Adevinta Information Services At Adevinta Information Services, we build and operate some of Spain's largest digital marketplaces, including InfoJobs, Milanuncios, Coches.net and Motos.net.

We're building a modern, AI-first cybersecurity organisation from the ground up following our separation from the global organisation. This is a unique opportunity to shape governance, compliance and cyber risk for a fast-moving technology company.

We're looking for a proactive and pragmatic GRC Manager who enjoys working close to the business and turning governance into an enabler rather than a blocker.

What you'll do

You will own the Governance, Risk & Compliance function across Adevinta Information Services and support our marketplaces in maintaining a strong security posture.

Responsibilities Include

• Own the Information Security Management System (ISMS)
• Lead ISO 27001, ENS and other security certifications and audits
• Coordinate cybersecurity assessments from internal stakeholders, EQT and external auditors
• Drive Third-Party Risk Management across suppliers and strategic partners
• Define and maintain security policies, standards and governance processes
• Lead security awareness and phishing programmes across the company
• Track security risks and remediation plans with business owners
• Build executive dashboards and security KPIs for senior leadership
• Coordinate Business Continuity and security governance activities
• Partner with Legal, Privacy, Procurement, Engineering and Product teams to embed security into business processes
• Help scale governance through automation and AI where possible

What we're looking for

• Experience leading GRC or Information Security Governance in a technology company
• Strong understanding of ISO 27001, ENS, NIST or similar frameworks
• Experience managing external audits
• Experience with Vendor Risk Management
• Excellent communication skills with technical and non-technical stakeholders
• Pragmatic mindset focused on reducing business riskAbility to work autonomously and drive initiatives end-to-end

Nice To Have

• Experience in SaaS, cloud-native or digital marketplace environments
• Experience with GRC platforms
• Security certifications (CISM, CRISC, ISO Lead Auditor...)

Why join us?

• Build a cybersecurity organisation from scratch
• High ownership and impact
• Work with modern cloud technologies
• AI-first security strategy
• Flexible hybrid environment
• International technology company
• Competitive salary and benefits