GRC Compliance Lead — SOC 2/ISO 27001 for AI Security

HappyRobot; Madrid; Presencial; EUR 55.000 - 85.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare

Dental and vision

Equity

Descripción de la vacante

HappyRobot is seeking a GRC Specialist to join our Security team in Madrid. You will scale our compliance frameworks and maintain a continuously audit-ready state, owning day-to-day operations of the GRC platform and serving as the primary contact for audits and customer inquiries.

This is a technical GRC role; you will collaborate with engineers to automate evidence and ensure controls are robust and well-documented, supporting SOC 2 Type II and ISO 27001 initiatives and helping drive future

Formación

• 1–3 years of experience in GRC, IT audit, or Security Compliance.
• Experience with SOC 2 or ISO 27001 end-to-end audits is a plus.
• Ability to understand and explain technical security controls to non-technical stakeholders.

Responsabilidades

• Maintain and improve compliance posture for SOC 2 Type II and ISO 27001; assist in future certifications.
• Automate evidence collection and monitor control health using GRC platforms.
• Lead external audit cycles and coordinate with auditors and internal teams.
• Own customer security questionnaires and build a Trust Center for security documentation.
• Conduct internal risk assessments and vendor security reviews.

Conocimientos

GRC

SOC 2

ISO 27001

Audit coordination

Security controls

GRC automation

Technical writing

Cloud IAM

Educación

Bachelor's degree in a relevant field

Herramientas

Vanta

Drata

Secureframe

AuditBoard

Descripción del empleo

HappyRobot is seeking a GRC Specialist to join our Security team in Madrid. You will scale our compliance frameworks and maintain a continuously audit-ready state, owning day-to-day operations of the GRC platform and serving as the primary contact for audits and customer inquiries.

This is a technical GRC role; you will collaborate with engineers to automate evidence and ensure controls are robust and well-documented, supporting SOC 2 Type II and ISO 27001 initiatives and helping drive future