GRC Compliance Lead - SOC 2 & ISO 27001 | Automation

Happyrobot Inc.; España; Presencial; EUR 42.000 - 64.000; Jornada completa

Descripción de la vacante

HappyRobot is seeking a GRC Specialist to scale our compliance framework and manage evidence collection. You will work with engineers to automate controls, coordinate external audits, and respond to customer security inquiries.

The role focuses on SOC 2 Type II and ISO 27001, with opportunities to contribute to HIPAA and GDPR roadmaps. Fluency in English and experience in SaaS security are essential for success.

Formación

• 1–3 years of experience in GRC, IT Audit, or Security Compliance.
• Experience with SOC 2 or ISO 27001 audits is a plus.
• Ability to understand technical security controls (encryption, IAM, CI/CD, cloud logs) and explain them to non-technical stakeholders.
• Experience with GRC automation platforms (Vanta, Drata, Secureframe, or similar).
• Exceptional written and verbal communication in English, especially auditor-facing responses.

Responsabilidades

• Maintain and improve our compliance posture for SOC 2 Type II and ISO 27001.
• Administer our GRC platform to automate evidence collection and monitor control health in real-time.
• Lead external audit cycles and coordinate between auditors and internal teams.
• Own the security questionnaire process and build a Trust Center for customers.
• Conduct internal risk assessments and vendor security reviews.

Conocimientos

GRC

IT Audit

Security Compliance

Security Documentation

English Communication

Herramientas

Vanta

Drata

Secureframe

Descripción del empleo

HappyRobot is seeking a GRC Specialist to scale our compliance framework and manage evidence collection. You will work with engineers to automate controls, coordinate external audits, and respond to customer security inquiries.

The role focuses on SOC 2 Type II and ISO 27001, with opportunities to contribute to HIPAA and GDPR roadmaps. Fluency in English and experience in SaaS security are essential for success.