GRC Security Expert

Leadtech Group; Barcelona; A distancia; EUR 30.000 - 54.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private health insurance

Flexible hours

Remote work option

Barcelona office

Free coffee & snacks

Restaurant vouchers

Nursery vouchers

Birthday off

Descripción de la vacante

Leadtech seeks a GRC Expert to strengthen information security, governance, and privacy across our organization. You will contribute to ISO 27001 compliance, privacy programs, and risk-based improvements while partnering with product, engineering, and marketing teams.

We offer flexible hours, a remote-friendly setup, and a Barcelona-based option. This role supports international initiatives and requires strong English and Spanish communication.

Formación

• Degree in Computer Science, Telecommunications, Law or equivalent practical experience.
• 1–2 years of experience in GRC, compliance, IT auditing, or related role.
• Working knowledge of ISO 27001:2022 and related controls.
• Familiarity with core data protection concepts and cloud IAM basics.
• Strong English and Spanish written communication; ability to coordinate in Spanish.

Responsabilidades

• Develop cybersecurity policies, procedures, and methodologies aligned with ISO 27001, GDPR, and NIS2.
• Handle multiple projects (audits, vendor reviews) without compromising quality.
• Drive Data Protection & Privacy initiatives and evidence collection.
• Identify gaps, troubleshoot issues, and raise timely alerts to stakeholders.
• Collaborate with product, engineering, and marketing to support governance goals.

Conocimientos

ISO 27001 knowledge

GRC experience

Data privacy

Cloud familiarity

Educación

Bachelor's in CS/Law/IT

Herramientas

GRC platforms

CISO Assistant

Vulnerability tooling

Descripción del empleo

At Leadtech, we’ve been redefining digital businesses since 2009, creating innovative online solutions that reach millions of users every month. With a diverse team of over 700 members from 23+ nationalities, we’re united by a passion for creativity and collaboration.

We specialize in delivering user-centric experiences across web and mobile platforms, where people can connect with our products like never before.

We’re proud of our global reach and committed to fostering an inclusive workplace where every individual contributes to our shared vision of bringing cutting‑edge projects to life. Learn more about our journey and mission on our About Us page!

About The Role

To support our continuous growth, the Security team is expanding to navigate evolving security frameworks, drive data protection audits, and lead strategic data privacy initiatives.

If you’re passionate about information security, governance, solving complex problems, collaborating across departments, and driving results, this role is perfect for you!

As a GRC Expert at Leadtech, You Will

• Develop cybersecurity policies, procedures, and methodologies to maintain an optimal level of security within the company and implement various standards and regulations.
• Juggle several projects at once (ISO 27001, vulnerability follow‑up, vendor reviews) without letting quality slip, keeping everything aligned with our security policies and the regulations that apply to us (ISO 27001, GDPR, NIS2).
• Develop Data Protection & Privacy initiatives
• Proactively identify, troubleshoot, and resolve issues to optimize both internal and external processes.
• Balance multiple projects without sacrificing quality, aligning your work with brand standards, cultural nuances, and regulatory requirements.
• Engage with diverse stakeholders (e.g., product, engineering, and marketing teams) to gather requirements, evaluate options, and develop tools and processes to support our organization’s goals.

Required Skills

We’re looking for someone with a balance of hard and soft skills who can thrive in a dynamic, cross‑functional environment. Here’s what we’d love to see:

• Degree in Computer Science, Telecommunications, Law or equivalent practical experience.
• 1 or 2 years of experience in GRC, compliance, IT auditor, or a related role.
• Working knowledge of ISO 27001:2022 (clause structure, Annex A controls, SoA). We are looking for someone with experience as an auditor, consultant, or implementation specialist.
• Working knowledge of core data protection concepts (data retention, PIAs, RATs)
• Basic familiarity with cloud platforms (AWS, GCP, Azure), enough to understand IAM concepts like least privilege, MFA, key rotation, and orphaned accounts, without needing admin‑level expertise
• Strong written communication in both English and Spanish (policies and audit deliverables are produced in English, day to day coordination is in Spanish)
• Excellent organizational skills, able to track multiple open items (findings, tickets, evidence requests) across different teams without losing the thread
• Proactive individual who takes the initiative: capable of following up with teams to gather evidence, identifying overdue deadlines, and driving tasks to completion with minimal supervision. Ability to independently identify gaps or deviations and elevate them in a timely manner, without the need for prior instruction.

Desirable

• Certification in progress or completed: ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISA, and CISM are viewed favorably.
• Exposure to NIS2 or other EU cybersecurity regulation
• Familiarity with GRC platforms (e.g. CISO Assistant) or vulnerability management tooling
• Prior experience supporting vendor/third‑party security assessments

Benefits

WHY LEADTECH

• Diversified app portfolio with millions of active users in a high‑growth non‑gaming vertical.
• Mature data infrastructure: BigQuery, Looker, AppsFlyer, and a proprietary analytics stack for fast decision‑making.
• Experimentation culture: real autonomy to propose and ship changes in production.
• International team, dynamic environment, and the opportunity for direct P&L impact.
• Competitive compensation package + benefits (flexible hours, health insurance, training).

Growth and career development

• At Leadtech, we prioritize your growth. Enjoy a flexible career path with personalized internal training and an annual budget for external learning opportunities.

Work-Life balance

• Benefit from a flexible schedule with flextime and the option of working full remote or from our Barcelona office. Enjoy free Friday afternoons with a 7‑hour workday, plus a 35‑hour workweek in July and August so you can savor summer!

Comprehensive benefits

• Competitive salary, full‑time permanent contract, and top‑tier private health insurance (including dental and psychological services).
• 25 days of vacation plus your birthday off, with flexible vacation options—no blackout days!

Unique Perks

• If you wish to come, in our office in Barcelona you’ll find it complete with free coffee, fresh fruit, snacks, a game room, and a rooftop terrace with stunning Mediterranean views.
• Additional benefits include ticket restaurant and nursery vouchers, paid directly from your gross salary.
• Join us in an environment where you’re free to innovate, learn, and grow alongside passionate professionals. At Leadtech, you’ll tackle exciting challenges and be part of a vibrant team dedicated to delivering exceptional user experiences

Equal Employment Opportunity Employer

Leadtech is an Equal Employment Opportunity (EEO) Employer, which means we encourage applications from people with different backgrounds, interests, and personal circumstances. Our team welcomes applicants regardless of their race, gender, age, religion, nationality, sexual orientation, gender identity, gender expressión and/or disabilities. All we need is your high energy, skills, and willingness to be a part of a great project!

Location

You'll have the flexibility to choose whether you'd like to come to the office every day, from time to time, or work fully remote. We want you to find the best combination for you.

If you prefer to be surrounded with amazing people, our exceptional office is in Barcelona’s Blue Building, located right on the city's seafront. Besides our stunning views, you’ll enjoy our office perks such as free fruit, snacks, and coffee and you’ll also be able to take part in our Mario Kart and table tennis competitions.

The personal data you provide will be processed in order to manage your candidacy for the corporate selection processes that fit your profile. If you wish, you can exercise your rights of access, rectification or cancellation by writing to our address (Avenida Litoral, 12-14, 5ta planta. Barcelona. 08005) or to the email address [e-mail].

#MAU