GRC & Information Security Lead — SOC 2 & ISO 27001

Maisa; País Vasco; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Maisa builds AI for the enterprise with a focus on regulated industries, delivering strong data protection and governance. We seek an Information Security Manager to own and continually improve the security compliance program, leading SOC 2 Type II and ISO/IEC 27001:2022 through audits and maintenance, with broader risk and governance responsibilities.

You will collaborate across Engineering, Legal, Finance and Operations to ensure evidence, controls and policies stay aligned with client demands

Qualifications

• 5+ years in information or cyber security, focused on governance, risk and compliance.
• Hands-on experience with SOC 2 or ISO/IEC 27001 programs and audits.
• Solid understanding of ISO 27001:2022, ISO 27002 controls and SOC 2 criteria.
• Experience designing and documenting controls, not just collecting evidence.
• Hands-on third-party risk management and client audit responses.
• Strong information security governance and risk management knowledge.
• Ability to work with technical teams to verify control effectiveness.
• Excellent written communication and executive reporting skills.

Responsibilities

• Lead SOC 2 Type II and ISO 27001 programs from readiness to certification and ongoing operation.
• Shape certification roadmaps for client needs and plan audits, budgets, and tooling.
• Run ISMS day-to-day: policies, controls owners, internal audits, and management reviews.
• Coordinate cross-functional control implementation and remediation tracking.
• Own company-wide information security and AI risk management processes and risk registers.
• Lead third-party risk management, vendor due diligence and security reviews.
• Respond to enterprise security assessments and client audits with documentation.
• Maintain ongoing processes for awareness, access reviews, incidents, changes, continuity.

Skills

SOC 2

ISO 27001

Audit coordination

Governance

Education

InfoSec degree

Tools

Vanta

Drata

Secureframe

Job description

Maisa builds AI for the enterprise with a focus on regulated industries, delivering strong data protection and governance. We seek an Information Security Manager to own and continually improve the security compliance program, leading SOC 2 Type II and ISO/IEC 27001:2022 through audits and maintenance, with broader risk and governance responsibilities.

You will collaborate across Engineering, Legal, Finance and Operations to ensure evidence, controls and policies stay aligned with client demands