GRC & Privacy Security Lead — Remote

Leadtech Group; Madrid; A distancia; EUR 42.000 - 66.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible hours

Health insurance

Training

Remote or Barcelona office

Friday afternoons free (7-hour day)

35-hour workweek in July & August

Descripción de la vacante

Leadtech is expanding its Security team in a GRC Expert role based in Spain. You will drive governance, risk and compliance efforts, aligning security policies with ISO 27001, GDPR and NIS2, while coordinating with product, engineering, and marketing teams.

The role focuses on data protection initiatives, audits, and vendor reviews, with a strong emphasis on documentation and stakeholder communication in English and Spanish.

Formación

• Degree in Computer Science, Telecommunications, Law or equivalent practical experience.
• 1–2 years of experience in GRC, compliance, IT auditing, or related roles.
• Knowledge of ISO 27001:2022 and experience as auditor/consultant/implementation specialist.
• Understanding of core data protection concepts (retention, PIAs, RATs).

Responsabilidades

• Develop cybersecurity policies, procedures, and methodologies to maintain an optimal level of security within the company and implement various standards and regulations.
• Juggle several projects at once (ISO 27001, vulnerability follow-up, vendor reviews) without letting quality slip, keeping everything aligned with our security policies and the regulations that apply to us (ISO 27001, GDPR, NIS2).
• Develop Data Protection & Privacy initiatives
• Proactively identify, troubleshoot, and resolve issues to optimize both internal and external processes.
• Balance multiple projects without sacrificing quality, aligning your work with brand standards, cultural nuances, and regulatory requirements.
• Engage with diverse stakeholders (e.g., product, engineering, and marketing teams) to gather requirements, evaluate options, and develop tools and processes to support our organization’s goals.

Conocimientos

ISO 27001 knowledge

Data protection concepts

Cloud platforms (AWS/GCP/Azure)

English & Spanish proficient

Stakeholder engagement

Auditing & governance

Educación

CS / Telecom / Law degree or equivalent

Herramientas

AWS

GCP

Azure

Descripción del empleo

Leadtech is expanding its Security team in a GRC Expert role based in Spain. You will drive governance, risk and compliance efforts, aligning security policies with ISO 27001, GDPR and NIS2, while coordinating with product, engineering, and marketing teams.

The role focuses on data protection initiatives, audits, and vendor reviews, with a strong emphasis on documentation and stakeholder communication in English and Spanish.