Governance, Risk & Compliance Specialist

PLUXEE ESPAÑA SAU; Madrid; Presencial; EUR 32.000 - 52.000; Jornada completa

Descripción de la vacante

PLUXEE ESPAÑA SAU is seeking a GRC Analyst to strengthen cybersecurity, compliance, and risk management across the organization. You will develop policies, monitor compliance, and collaborate with IT, Legal, and HR teams.

You bring a Bachelor’s degree with 3–5 years in GRC in multinational settings; certifications such as CRISC or CISA are valued, with fluency in English and Spanish.

Formación

• Bachelor’s degree in Risk Management, Business Administration, Cybersecurity, or related field.
• 3–5 years of GRC/cybersecurity experience in multinational or regulated environment.
• Certifications encouraged: CRISC, ISO 27001 Lead Implementer, CISA, or equivalent; ENS is a plus.
• Knowledge of ISO 27001, NIST, GDPR, LGPD, DORA; familiarity with GRC tools such as OneTrust, Sandas GRC, GlobalSuite.

Responsabilidades

• Develop, update, and maintain cybersecurity and compliance-related policies and standards.
• Align with global regulatory and industry frameworks (ISO 27001, NIST, GDPR, LGPD, DORA).
• Track and report cybersecurity KPIs and KRIs to senior stakeholders.
• Collaborate with IT, Privacy, Legal, and Compliance teams to ensure integrated governance.
• Support audits, risk assessments, and control testing activities.

Conocimientos

Analytical skills

Documentation

Stakeholder communication

English & Spanish

Educación

Bachelor’s degree in Risk Management

Herramientas

OneTrust

Sandas GRC

GlobalSuite

Descripción del empleo

At Pluxee, we shape the world of employee benefits and engagement by bringing to life a personalized and sustainable employee experience, at work and beyond.

Permanent Regular Job Description: Pluxee is a global player in employee benefits and engagement that operates in 28 countries. We help companies attract, engage, and retain talent thanks to a broad range of solutions across Meal & Food, Wellbeing, Lifestyle, Reward & Recognition, and Public Benefits. Powered by leading technology and more than 5,000 engaged team members, Pluxee acts as a trusted partner within a highly interconnected B2B2C ecosystem made up of more than 500,000 clients, 36 million consumers and 1.7 million merchants. Conducting its business as a trusted partner for more than 45 years, Pluxee is committed to creating a positive impact on all its stakeholders, from driving business to local communities, to supporting wellbeing at work for employees while protecting the planet.

Your next challenge

The GRC (Governance, Risk, and Compliance) Analyst supports Pluxee’s global cybersecurity, compliance, and risk management initiatives by developing, implementing, and monitoring GRC frameworks. Operating within a dynamic B2B2C environment, this global individual contributor role collaborates across functions to ensure regulatory alignment, policy compliance, and continuous risk mitigation. The role contributes directly to Pluxee’s strategic ambition to be a SMART Leader in employee benefits by embedding robust and responsible governance practices.

Key Responsibilities

1. Policy & Framework Development
   • Develop, update, and maintain cybersecurity and compliance-related policies, procedures, and standards.
   • Ensure alignment with global regulatory and industry frameworks (e.g., ISO 27001, NIST, GDPR, LGPD, DORA).
   • Support the continuous improvement and application of Pluxee’s GRC framework.
2. Monitoring & Reporting
   • Track and analyze cybersecurity KPIs and KRIs, providing data-driven insights and risk posture updates to senior stakeholders.
   • Contribute to regular internal reporting and audits, ensuring visibility and transparency on compliance efforts.
3. Collaboration & Alignment
   • Collaborate with cross-functional teams including IT, Privacy, Legal, and Compliance to ensure integrated governance approaches.
   • Support business units in applying policies and resolving GRC-related questions or challenges.
4. Awareness & Training
   • Participate in the rollout of awareness campaigns and employee training programs aligned with cybersecurity and compliance priorities.
   • Provide subject matter input to content development for GRC education.
5. Research & Innovation
   • Conduct research on evolving GRC practices, regulatory updates, and technological advancements.
   • Identify improvement opportunities and recommend enhancements to existing controls and methodologies.
6. Operational Support
   • Support the implementation of GRC initiatives, tools, and controls across countries and business lines.
   • Provide subject matter input during audits, risk assessments, and control testing activities.

You are a match

• Bachelor’s degree in Risk Management, Business Administration, Cybersecurity, or a related field.
• 3–5 years of relevant experience in GRC, cybersecurity compliance, or information risk management in a multinational or regulated environment.
• Certification preferred: CRISC, ISO 27001 Lead Implementer, CISA, or equivalent.
• Certification in Esquema Nacional de Seguridad (ENS) will be a plus.
• Knowledge and experience on global regulatory and industry frameworks (e.g., ISO 27001, NIST, GDPR, LGPD, DORA).
• Familiarity with GRC tools and platforms such as OneTrust, Sandas GRC, GlobalSuite.
• Strong analytical and documentation skills.
• Excellent communication skills and ability to interact with multiple stakeholders (IT, HR, Compliance, C level, Cybersecurity comitee members).
• Proficiency in Microsoft 365 suite.
• Fluent in English and Spanish.

Why join Pluxee?

Join an inclusive team: work at the heart of the community alongside 5,000 experts across 29 countries - we embrace diversity and value uniqueness, fostering a workplace where everyone can thrive. Turn inspiration into possibility: get space to try new ideas, experiment and move the world of work forward as you bring new digital experiences - and moments of connection - to millions of people. Make a positive impact: touch millions of lives and create meaningful change for people and the world we share, supporting our commitments to diversity, sustainability, and local economies. Grow with us: get support you need to take meaningful steps in your career, whether you're performing your work/life balance or learning new skills.

Why join Pluxee?

Join an inclusive team: work at the heart of the community alongside 5,000 experts across 29 countries - we embrace diversity and value uniqueness, fostering a workplace where everyone can thrive. Turn inspiration into possibility: get space to try new ideas, experiment and move the world of work forward as you bring new digital experiences - and moments of connection - to millions of people. Make a positive impact: touch millions of lives and create meaningful change for people and the world we share, supporting our commitments to diversity, sustainability, and local economies. Grow with us: get support you need to take meaningful steps in your career, whether you're performing your work/life balance or learning new skills.