GRC Security Manager: SOC 2 & ISO 27001 Lead (Remote)

Maisa; Andalucía; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Maisa builds AI for the enterprise, focusing on regulated industries such as banking. Our clients expect proven data protection and secure processes, and this role provides it.

We seek an Information Security Manager in our Governance, Risk and Compliance function to own and continuously improve Maisa’s security compliance program, leading SOC 2 Type II and ISO/IEC 27001:2022 through audits and certification, and expanding into new frameworks as client demand grows.

Qualifications

• 5+ years in information or cyber security with governance, risk and compliance.
• Hands-on with SOC 2 or ISO 27001 programs and audits.
• Knowledge of ISO 27001:2022, SOC 2 criteria, ISMS operation, and risk assessment.

Responsibilities

• Lead SOC 2 Type II and ISO 27001 programs from readiness to certification and ongoing operations.
• Plan audits, budget, and tooling for new requirements.
• Run ISMS day-to-day: policies, controls, internal audit and management review.
• Translate framework requirements into practical controls with owners and evidence.
• Coordinate control implementation across Engineering, Security, Platform, Operations, People, Legal, Finance.
• Own company-wide information security and AI risk management process including risk register and treatment plans.
• Run third-party risk management: vendor due diligence and security reviews.
• Lead responses to enterprise customer security assessments and audits.
• Maintain recurring processes: awareness, access reviews, incident and change management, business continuity, secure development.

Skills

Governance & risk

Information security

SOC 2 Type II

ISO 27001

Audit coordination

ISMS operation

Security controls design

Third-party risk

Security metrics

Tools

Vanta

Drata

Secureframe

Job description

Maisa builds AI for the enterprise, focusing on regulated industries such as banking. Our clients expect proven data protection and secure processes, and this role provides it.

We seek an Information Security Manager in our Governance, Risk and Compliance function to own and continuously improve Maisa’s security compliance program, leading SOC 2 Type II and ISO/IEC 27001:2022 through audits and certification, and expanding into new frameworks as client demand grows.