GRC InfoSec Manager: SOC 2 & ISO 27001 Lead

Maisa; Cantabria; Hybrid; EUR 65,000 - 90,000; Full time

Job summary

Maisa is hiring an Information Security Manager to own and improve the company’s security program. You will lead SOC 2 Type II and ISO/IEC 27001:2022 efforts, build a scalable ISMS, and drive governance, risk and compliance across multiple functions.

You will collaborate with Engineering, Legal, and Finance to implement controls, manage third-party risks, and respond to customer security assessments. This role is remote-friendly with hybrid collaboration in a fast-growing R&D environment.

Qualifications

• 5+ years in information or cyber security, with governance, risk and compliance focus.
• Hands-on experience implementing or operating SOC 2 or ISO/IEC 27001 programs, including audits.
• Strong knowledge of ISO 27001:2022, ISO 27002 controls, SOC 2 criteria, ISMS operation, risk assessment and testing.
• Experience designing and documenting controls, not only collecting evidence.
• Hands-on third-party risk management and experience answering enterprise security questionnaires and client audits.

Responsibilities

• Lead SOC 2 Type II and ISO 27001 programs from readiness to certification, and keep them running.
• Shape the certification roadmap as client demand grows and plan audits, budgets, and tooling.
• Run the ISMS day to day: policies, control ownership, internal audits, and management reviews.
• Coordinate control implementation across Engineering, Security, Platform, Operations, People, Legal, Finance and other teams; drive findings to closure.
• Own the company-wide information security and AI risk management process, including risk registers and remediation plans.
• Run third-party risk management, including vendor due diligence and security reviews with Legal.
• Lead responses to enterprise security assessments, due-diligence questionnaires, and client audits.
• Maintain recurring processes and evidence: awareness, access reviews, incident/change management, BC/DR, and secure development across AWS, Kubernetes, identity systems.

Skills

SOC 2 Type II

ISO 27001

Audit coordination

Risk management

Policy development

ISMS operations

Job description

Maisa is hiring an Information Security Manager to own and improve the company’s security program. You will lead SOC 2 Type II and ISO/IEC 27001:2022 efforts, build a scalable ISMS, and drive governance, risk and compliance across multiple functions.

You will collaborate with Engineering, Legal, and Finance to implement controls, manage third-party risks, and respond to customer security assessments. This role is remote-friendly with hybrid collaboration in a fast-growing R&D environment.