GRC Information Security Manager (SOC 2 / ISO 27001)

Maisa; Aragón; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Weekly transportation to Valencia HQ

Weekly team lunches in Valencia &

Barcelona

Job summary

Maisa is seeking an Information Security Manager to own and evolve the company’s security and AI risk program. You will lead SOC 2 Type II and ISO/IEC 27001:2022 initiatives, drive audits, and build a scalable ISMS that aligns with client requirements.

The role collaborates across Engineering, Legal, and Finance to embed rigorous controls and governance. You will shape security policy, manage third-party risk, and respond to customer security inquiries, with a hands-on approach to implementing

Qualifications

• 5+ years in information or cyber security, focusing on governance, risk and compliance.
• Hands-on experience implementing or operating SOC 2 or ISO 27001 programs with audits or certifications.
• Strong understanding of ISO 27001:2022, ISO 27002 controls, SOC 2 Trust Services Criteria, ISMS operation and risk assessment.

Responsibilities

• Lead SOC 2 Type II and ISO 27001 programs from readiness to certification and ongoing operation.
• Plan audits, budgets and tooling for additions like AI governance frameworks.
• Manage ISMS day to day: policies, control ownership, internal audits and management reviews.
• Coordinate control implementation and continuous assessment across engineering, security, and other teams.
• Own company-wide information security and AI risk management processes and risk registers.
• Run third-party risk management, vendor due diligence and security assessments.
• Lead responses to customer security assessments and audit requests.
• Maintain repeatable processes for security awareness, access reviews, incident and change management.

Skills

SOC 2 Type II

ISO 27001

GRC programs

Third-party risk

Audits & certification

Cloud security

ISMS operation

Policy development

Tools

AWS

Kubernetes

Job description

Maisa is seeking an Information Security Manager to own and evolve the company’s security and AI risk program. You will lead SOC 2 Type II and ISO/IEC 27001:2022 initiatives, drive audits, and build a scalable ISMS that aligns with client requirements.

The role collaborates across Engineering, Legal, and Finance to embed rigorous controls and governance. You will shape security policy, manage third-party risk, and respond to customer security inquiries, with a hands-on approach to implementing