GRC Lead, Cybersecurity & Compliance - Madrid (Hybrid)

Montarelo Recruiting; Madrid; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

A technology-based startup is seeking a Governance Risk & Compliance Lead in Madrid. This role involves implementing compliance frameworks and managing risk while ensuring regulatory readiness. The ideal candidate has over 5 years of experience in cybersecurity, specifically in a SaaS environment, and strong communication skills in both Spanish and English. This position offers a hybrid working model and requires a valid EU work permit.

Qualifications

• 5+ years of experience in cybersecurity within cloud-first or SaaS organizations.
• At least 2+ years in GRC roles.
• Good knowledge of GDPR, ISO 27001, SOC 2, NIS 2, and NIST CSF.

Responsibilities

• Lead the implementation of GDPR, ISO 27001, SOC 2, and NIS 2 compliance.
• Develop and maintain policies and procedures for certification and audit readiness.
• Conduct regular risk assessments and maintain a centralized risk register.

Skills

Communication skills

Stakeholder management

Risk assessment

Governance frameworks

Education

Bachelor's Degree in IT or related field

Tools

Compliance automation platforms

Azure cloud environments

Job description

A technology-based startup is seeking a Governance Risk & Compliance Lead in Madrid. This role involves implementing compliance frameworks and managing risk while ensuring regulatory readiness. The ideal candidate has over 5 years of experience in cybersecurity, specifically in a SaaS environment, and strong communication skills in both Spanish and English. This position offers a hybrid working model and requires a valid EU work permit.