Information Security Coordinator GRC | Up to 60k | Hybrid in Málaga or Remote in Spain

Talent-R; Andalucía; A distancia; EUR 50.000 - 60.000; Jornada completa

Descripción de la vacante

A leading European consulting firm is seeking an Information Security Coordinator – GRC to enhance their cybersecurity posture. The role involves developing governance frameworks, supporting compliance programs, and managing risk across the organization. Ideal candidates will have a degree in Cybersecurity and 3-5 years of relevant experience. This position offers a hybrid work setup, competitive salary up to €60k, and ongoing professional development opportunities.

Servicios

Health & wellness benefits

Continuous professional development

Flexible work setup

Formación

• 3–5 years of experience in Governance, Risk, and Compliance (GRC) or audit support.
• Experience in cybersecurity policy implementation and risk management.

Responsabilidades

• Develop and advise on cybersecurity governance frameworks.
• Conduct internal security assessments and audit preparations.
• Draft and enforce security policies across the organization.
• Support Business Continuity Management frameworks.

Conocimientos

ISO / IEC 27001 knowledge

Risk assessments

Audit readiness

Data protection regulations understanding

Strong documentation skills

Educación

Bachelor’s / Master’s degree in Cybersecurity

Descripción del empleo

We are looking for an Information Security Coordinator – GRC to join our client’s team. A leading European consulting, planning, and project management company with a global footprint, delivering sustainable, innovative, and economical solutions across real estate, industry, energy, and infrastructure.

Creating a future worth living for future generations drives everything we do. Through interdisciplinary teams, visionary thinking, and cutting-edge technologies, we ensure our clients achieve regulatory compliance, secure operations, and resilient business continuity.

Now, we are looking for a GRC expert to strengthen the organization’s cybersecurity posture, support compliance programs, and embed governance and risk management frameworks across the enterprise.

If you thrive on ensuring security maturity, driving audit readiness, and implementing best-in-class cybersecurity controls, this role is for you.

Responsibilities

GRC Execution & Advisory

• Develop, maintain, and advise on cybersecurity governance, risk, and compliance frameworks (ISO / IEC 27001, 27701, 22301, TISAX, NIS2).
• Support cross-functional teams in embedding security controls into business processes.

Audit Preparation & Support

• Conduct internal security assessments and prepare documentation for external audits.
• Track non-conformities and ensure corrective actions are implemented.

Policy Implementation & Risk Management

• Draft, maintain, and enforce security policies and procedures across business units.
• Execute risk assessments, evaluate controls, and support continuous improvement of mitigation plans.

Business Continuity & BCM

• Support the development, implementation, and maintenance of Business Continuity Management frameworks.
• Conduct Business Impact Analyses (BIA) and align continuity plans with risk management strategies.

Compliance Monitoring

• Ensure adherence to data protection regulations (e.g., GDPR) and internal security standards.
• Contribute to certification programs and regulatory initiatives.

Documentation & Reporting

• Maintain high-quality compliance documentation.
• Support reporting to the cybersecurity steering committee and other stakeholders.

Requirements

Education & Experience

• Bachelor’s / Master’s degree in Cybersecurity, Information Systems, or related field (or equivalent experience).
• 3–5 years of experience in Governance, Risk, and Compliance, audit support, or security program implementation.

Technical Skills

• Deep understanding of ISO / IEC 27001, 27701, 22301, NIST, GDPR frameworks.
• Experience with risk assessments, compliance programs, and audit readiness.
• Knowledge of operational security in IT and industrial environments.
• Strong documentation and reporting capabilities.

Soft Skills

• Analytical mindset with attention to detail.
• Ability to communicate technical findings to both IT and business stakeholders.
• Proactive, self-driven, and continuous learner.

Certifications (preferred)

• ISO 27001 / 27701 / 22301 Implementer or Auditor
• ITIL Certified
• IPMO – International Project Management Officer

What We Offer

• Dynamic, collaborative environment where cybersecurity is a strategic priority
• Hybrid work setup with flexibility for remote work
• Salary up to 50-60k depending on experience
• Continuous professional development via internal Academy & external certifications
• Health & wellness benefits (private health insurance, sports bonus)