GRC & InfoSec Auditor - Risk & Compliance Lead

Verisure; Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Verisure in Madrid seeks an Information Security Audit lead to safeguard IT and business processes by identifying, assessing, and mitigating cybersecurity risks. You will collaborate with the Cyber & IT Risk Team to implement risk controls, policies, and standards across the organization.

You will build and mature the Information Security Audit function, document gaps, guide remediation, and support regulatory compliance incl.

Formación

• Bachelor’s degree in a relevant field.
• 4+ years’ experience in Information Security, IT risk and compliance.
• Experience defining and executing an IT risk control framework for internal and third-party environments.
• Experience performing information security and IT assessments and compliance/maturity assessments.

Responsabilidades

• Build and mature the Information Security Audit function.
• Manage and advance the IT risk control framework for effective operation and monitoring.
• Document control gaps and drive remediation across the organization.
• Develop security policies, standards, and procedures for standardized controls.
• Perform risk assessments across IT and business processes with mitigations.
• Ensure risk and remediation plans are addressed by owners.
• Support regulatory compliance activities (ISO27001, NIST, GDPR).
• Audit and document processes and prepare management reports.

Conocimientos

Information Security

IT risk management

Regulatory compliance

Audit

GDPR

ISO27001

NIST

SOC 2

Risk assessment

English

Educación

Bachelor’s degree in a relevant field

Herramientas

GRC tool

Descripción del empleo

Verisure in Madrid seeks an Information Security Audit lead to safeguard IT and business processes by identifying, assessing, and mitigating cybersecurity risks. You will collaborate with the Cyber & IT Risk Team to implement risk controls, policies, and standards across the organization.

You will build and mature the Information Security Audit function, document gaps, guide remediation, and support regulatory compliance incl.