GRC & InfoSec Leader: Build an AI-First Security Culture

coches.net; Barcelona; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid work policy

Competitive salary

Job summary

Adevinta Information Services is building a modern, AI-first cybersecurity organization. We seek a proactive GRC Manager to own governance, risk and compliance and enable the business to move securely and efficiently.

You will lead the ISMS, oversee ISO 27001 and other certifications, coordinate audits, and drive risk management across our marketplaces. This role demands collaboration with Legal, Privacy, Procurement, Engineering and Product teams.

Qualifications

• Experience leading GRC or information security governance in a technology company.
• Strong understanding of ISO 27001, ENS, NIST or similar frameworks.
• Experience managing external audits.
• Experience with Vendor Risk Management.
• Excellent communication skills with technical and non-technical stakeholders.
• Pragmatic mindset focused on reducing business risk and autonomous initiative.

Responsibilities

• Own the Governance, Risk & Compliance function across Adevinta Information Services and support marketplaces in maintaining a strong security posture.
• Lead ISO 27001, ENS and other security certifications and audits.
• Coordinate cybersecurity assessments from internal stakeholders, EQT and external auditors.
• Drive Third-Party Risk Management across suppliers and strategic partners.
• Define and maintain security policies, standards and governance processes.
• Lead security awareness and phishing programmes across the company.
• Track security risks and remediation plans with business owners.
• Build executive dashboards and security KPIs for senior leadership.
• Coordinate Business Continuity and security governance activities.
• Partner with Legal, Privacy, Procurement, Engineering and Product teams to embed security into business processes.
• Help scale governance through automation and AI where possible.

Skills

GRC leadership

ISO 27001

Security audits

Vendor risk management

Effective communication

Automation/AI in governance

Tools

GRC platforms

Job description

Adevinta Information Services is building a modern, AI-first cybersecurity organization. We seek a proactive GRC Manager to own governance, risk and compliance and enable the business to move securely and efficiently.

You will lead the ISMS, oversee ISO 27001 and other certifications, coordinate audits, and drive risk management across our marketplaces. This role demands collaboration with Legal, Privacy, Procurement, Engineering and Product teams.