GRC Compliance Specialist — SOC 2 & ISO 27001

happyrobot.ai; Madrid; On-site; EUR 52,000 - 76,000; Full time

Job summary

HappyRobot is seeking a GRC Specialist to join our Security team. You will scale compliance programs, own day-to-day GRC platform operations, and serve as the primary contact for customer security inquiries and external audits.

This is a technical GRC role working with engineers to automate evidence and ensure robust, well-documented security controls. If you thrive in a fast-growing SaaS environment, have 1–3 years of GRC experience, and excel at communicating complex security topics in

Qualifications

• 1–3 years of experience in GRC, IT Audit, or Security Compliance.
• Proven experience with SOC 2 or ISO 27001 (end-to-end audits a plus).
• Ability to explain technical security controls to non-technical stakeholders.
• Experience with GRC automation platforms (Vanta, Drata, Secureframe, or similar).
• Excellent written and verbal English communication.

Responsibilities

• Framework Management for SOC 2 Type II and ISO 27001.
• GRC automation: administer platforms to automate evidence collection.
• Audit coordination: lead external audit cycles with internal teams.
• Customer trust: manage security questionnaires and build a Trust Center.
• Risk management: conduct internal risk assessments and vendor reviews.

Skills

GRC experience

SOC 2

ISO 27001

GRC automation

English proficiency

Tools

Vanta

Drata

Secureframe

Job description

HappyRobot is seeking a GRC Specialist to join our Security team. You will scale compliance programs, own day-to-day GRC platform operations, and serve as the primary contact for customer security inquiries and external audits.

This is a technical GRC role working with engineers to automate evidence and ensure robust, well-documented security controls. If you thrive in a fast-growing SaaS environment, have 1–3 years of GRC experience, and excel at communicating complex security topics in