GRC Information Security Manager (SOC 2 / ISO 27001)

Maisa; Islas Canarias; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Remote work option

Hybrid work model

Team lunches

Job summary

Maisa is building AI for enterprise and seeks an Information Security Manager to own and continuously improve the security and compliance program. You will lead SOC 2 Type II and ISO/IEC 27001:2022 efforts, coordinate audits, and drive risk management across functions.

In this hands-on role, you will develop policies, manage the ISMS, collaborate with engineering and legal teams, and ensure controls are effective across cloud and on‑premises environments.

Qualifications

• 5+ years in information or cyber security with governance, risk, and compliance.
• Hands-on experience running SOC 2 or ISO 27001 audits or certifications.
• Strong knowledge of ISO 27001:2022, SOC 2 criteria, and ISMS operation.

Responsibilities

• Lead SOC 2 Type II and ISO 27001 programs from readiness to certification and ongoing maintenance.
• Coordinate audits, evidence collection, and liaison with auditors and bodies.
• Oversee ISMS, risk registers, and third-party risk management processes.
• Develop and maintain security policies, controls, and governance across functions.
• Manage vendor risk assessments, client security requests, and due diligence.

Skills

SOC 2 & ISO 27001 programs

Governance, risk & compliance

Auditing & certification

Third‑party risk management

Security governance & policies

Communication skills

Education

CISA

CISM

CRISC

CISSP

ISO 27001 Lead Auditor

Tools

Vanta

Drata

Secureframe

AWS

Kubernetes

Job description

Maisa is building AI for enterprise and seeks an Information Security Manager to own and continuously improve the security and compliance program. You will lead SOC 2 Type II and ISO/IEC 27001:2022 efforts, coordinate audits, and drive risk management across functions.

In this hands-on role, you will develop policies, manage the ISMS, collaborate with engineering and legal teams, and ensure controls are effective across cloud and on‑premises environments.