GRC InfoSec Manager: SOC 2 & ISO 27001 Leader

Maisa; País Vasco; Hybrid; EUR 85,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Weekly team lunches in Valencia and/or

Weekly transportation from Valencia to

Job summary

Maisa is seeking an Information Security Manager to own and continuously improve the company’s security compliance program. You will lead SOC 2 Type II and ISO/IEC 27001:2022 through audits and certification, and then maintain both while expanding the program across governance, risk, and compliance functions.

You will collaborate with Engineering, Security, Legal, and Finance to implement controls, drive risk management, and respond to client security assessments in a fast‑growing, hybrid work

Qualifications

• Minimum 5+ years in information or cyber security with focus on governance, risk and compliance.
• Hands‑on experience leading or participating in audits and certifications (SOC 2 Type II, ISO 27001).
• Strong knowledge of ISO 27001:2022, SOC 2 criteria, ISMS operations and risk assessment.
• Ability to design and document controls, not just collect evidence.
• Experience with third‑party risk management and security questionnaires.

Responsibilities

• Lead SOC 2 Type II and ISO 27001 programs from readiness to certification and ongoing operation.
• Define certification roadmap (e.g., ISO/IEC 42001 for AI governance) and manage audits, budgets, tooling.
• Run the ISMS daily: policies, control owners, internal audits, and management reviews.
• Coordinate control implementation across Engineering, Security, Platform, Operations, Legal, Finance and more.
• Own company‑wide information security and AI risk management processes, including risk registers and remediation.

Skills

Governance

Risk management

Compliance

SOC 2

ISO 27001

Audit execution

Third‑party risk

IAM

Secure SDLC

Vulnerability management

Incident response

Monitoring & logging

Business continuity

Disaster recovery

Security awareness

Project management

Policy writing

Executive reporting

Autonomous work

Tools

AWS

Kubernetes

Vanta

Drata

Secureframe

Job description

Maisa is seeking an Information Security Manager to own and continuously improve the company’s security compliance program. You will lead SOC 2 Type II and ISO/IEC 27001:2022 through audits and certification, and then maintain both while expanding the program across governance, risk, and compliance functions.

You will collaborate with Engineering, Security, Legal, and Finance to implement controls, drive risk management, and respond to client security assessments in a fast‑growing, hybrid work