GRC & IT Security Risk Analyst

Verisure; Pozuelo de Alarcón; On-site; EUR 60,000 - 90,000; Full time

Job summary

Verisure in Madrid is seeking an IT Security Governance, Risk and Assurance professional to identify, assess, and mitigate cybersecurity and IT risks across the business. You will support implementation of risk controls and build cross-functional relationships within Technology and other units.

You will develop security policies, run risk assessments, track KPIs, and ensure compliance with GDPR, ISO 27001, and NIST guidance, while reporting findings to stakeholders.

Qualifications

• Bachelor’s degree in a relevant field required with at least 4 years in Information Security & IT risk and compliance.
• Experience defining, creating, and executing Information Security & IT risk control frameworks for internal and third-party partners.
• Ability to document security procedures, policies, and standards and perform compliance assessments.
• Proven ability to define and track KPIs/KRIs and produce stakeholder-focused reporting.
• Experience with audits and remediation across internal and third-party environments.

Responsibilities

• Build and maintain the Audit function within Information Security.
• Mature the Information Security & IT risk control framework for effective operation and monitoring of controls.
• Document and report control failures; provide remediation guidance and drive actions.
• Develop security policies, standards, and procedures to standardize controls.
• Conduct risk assessments across IT and business processes; suggest mitigations.
• Ensure timely remediation by risk and control owners.
• Support compliance with regulations (ISO27001, NIST, GDPR).
• Audit and document processes; summarize findings for management.

Skills

Information Security

IT Risk

Compliance

GRC

Risk Assessments

Audit

KPIs/KRIs

Education

Bachelor’s degree in a relevant field

Security certifications: CISSP, CRISC, CISM, CISA, Security+, ISO 27001

Tools

GRC tool

Job description

Verisure in Madrid is seeking an IT Security Governance, Risk and Assurance professional to identify, assess, and mitigate cybersecurity and IT risks across the business. You will support implementation of risk controls and build cross-functional relationships within Technology and other units.

You will develop security policies, run risk assessments, track KPIs, and ensure compliance with GDPR, ISO 27001, and NIST guidance, while reporting findings to stakeholders.