GRC Compliance Specialist

HappyRobot; Madrid; Presencial; EUR 55.000 - 85.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare

Dental and vision

Equity

Descripción de la vacante

HappyRobot is seeking a GRC Specialist to join our Security team in Madrid. You will scale our compliance frameworks and maintain a continuously audit-ready state, owning day-to-day operations of the GRC platform and serving as the primary contact for audits and customer inquiries.

This is a technical GRC role; you will collaborate with engineers to automate evidence and ensure controls are robust and well-documented, supporting SOC 2 Type II and ISO 27001 initiatives and helping drive future

Formación

• 1–3 years of experience in GRC, IT audit, or Security Compliance.
• Experience with SOC 2 or ISO 27001 end-to-end audits is a plus.
• Ability to understand and explain technical security controls to non-technical stakeholders.

Responsabilidades

• Maintain and improve compliance posture for SOC 2 Type II and ISO 27001; assist in future certifications.
• Automate evidence collection and monitor control health using GRC platforms.
• Lead external audit cycles and coordinate with auditors and internal teams.
• Own customer security questionnaires and build a Trust Center for security documentation.
• Conduct internal risk assessments and vendor security reviews.

Conocimientos

GRC

SOC 2

ISO 27001

Audit coordination

Security controls

GRC automation

Technical writing

Cloud IAM

Educación

Bachelor's degree in a relevant field

Herramientas

Vanta

Drata

Secureframe

AuditBoard

Descripción del empleo

About HappyRobot

HappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don't just communicate through voice and email - they make decisions, take action, and run operations autonomously across entire enterprise systems. Born in Y Combinator (S23) and backed by a16z, Base10, Prysm Capital and Eurazeo with over $150M raised, we power critical operations for global enterprises worldwide.

About HappyRobot

HappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don't just communicate through voice and email - they make decisions, take action, and run operations autonomously across entire enterprise systems. Born in Y Combinator (S23) and backed by a16z, Base10, Prysm Capital and Eurazeo with over $150M raised, we power critical operations for global enterprises worldwide.

Our platform is battle-tested in the most demanding environments, where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Learn more about our vision in our manifesto.

About The Role

We are looking for a GRC Specialist to join our Security team. Your mission is to scale our compliance frameworks and ensure we maintain a "continuously audit-ready" state. You will own the day-to-day operations of our GRC platform, manage evidence collection, and act as the primary point of contact for customer security inquiries and external audits.

This is a technical GRC role: you won’t just be checking boxes; you will be working with engineers to automate evidence and ensure our security controls are robust and well-documented.

What You’ll Do

• Framework Management: Maintain and improve our compliance posture for SOC 2 Type II and ISO 27001. Assist in the roadmap for future certifications (e.g., HIPAA, GDPR).
• GRC Automation: Administer our GRC platform (e.g., Vanta, Drata) to automate evidence collection and monitor control health in real-time.
• Audit Coordination: Lead external audit cycles, acting as the main interface between auditors and our internal technical teams.
• Customer Trust: Own the security questionnaire process. Build and maintain a "Trust Center" or Knowledge Base to accelerate sales cycles by providing accurate security documentation to prospects.
• Risk Management: Conduct internal risk assessments and vendor security reviews to ensure our supply chain meets HappyRobot’s standards.

Must-Haves

• 1–3 years of experience in GRC, IT Audit, or Security Compliance.
• Proven experience working with SOC 2 or ISO 27001 (end-to-end audit experience is a plus).
• Ability to understand technical security controls (encryption, IAM, CI/CD, cloud logs) and explain them to non-technical stakeholders.
• Prior experience with GRC automation platforms (Vanta, Drata, Secureframe, or similar).
• Exceptional written and verbal communication in English. You will be drafting auditor-facing evidence and customer-facing security responses.

Nice-to-Haves

• Prior experience in a high-growth SaaS startup.
• CISA, CRISC, or similar certifications.
• Basic understanding of cloud infrastructure (AWS/GCP).

Why join us?

• Join a world-class team of engineers and builders.
• Backed by top investors including a16z, Y Combinator, Base10, Prysm Capital and Eurazeo.
• Have ownership and autonomy of projects and are encouraged to ship.
• Comprehensive Benefits including healthcare, dental, vision coverage.
• Competitive salary + equity in a high-growth startup.

Our Operating Principles

Extreme Ownership

Craftsmanship

We are “majos”

Urgency with Focus

Talent Density and Meritocracy

First-Principles Thinking

The personal data provided in your application and during the selection process will be processed by Happyrobot, Inc., acting as Data Controller.

By sending us your CV, you consent to the processing of your personal data for the purpose of evaluating and selecting you as a candidate for the position. Your personal data will be treated confidentially and will only be used for the recruitment process of the selected job offer.

In relation to the period of conservation of your personal data, these will be eliminated after three months of inactivity in compliance with the GDPR and legislation on the protection of personal data.

If you wish to exercise your rights of access, rectification, deletion, portability or opposition in relation to your personal data, you can do so through [e-mail] subject to the GDPR.

For more information, visit https://www.happyrobot.ai/privacy-policy

By submitting your request, you confirm that you have read and understood this clause and that you agree to the processing of your personal data as described.