Information Security Grc Analyst - Verisure

Verisure; Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Verisure in Madrid seeks an Information Security Audit lead to safeguard IT and business processes by identifying, assessing, and mitigating cybersecurity risks. You will collaborate with the Cyber & IT Risk Team to implement risk controls, policies, and standards across the organization.

You will build and mature the Information Security Audit function, document gaps, guide remediation, and support regulatory compliance incl.

Formación

• Bachelor’s degree in a relevant field.
• 4+ years’ experience in Information Security, IT risk and compliance.
• Experience defining and executing an IT risk control framework for internal and third-party environments.
• Experience performing information security and IT assessments and compliance/maturity assessments.

Responsabilidades

• Build and mature the Information Security Audit function.
• Manage and advance the IT risk control framework for effective operation and monitoring.
• Document control gaps and drive remediation across the organization.
• Develop security policies, standards, and procedures for standardized controls.
• Perform risk assessments across IT and business processes with mitigations.
• Ensure risk and remediation plans are addressed by owners.
• Support regulatory compliance activities (ISO27001, NIST, GDPR).
• Audit and document processes and prepare management reports.

Conocimientos

Information Security

IT risk management

Regulatory compliance

Audit

GDPR

ISO27001

NIST

SOC 2

Risk assessment

English

Educación

Bachelor’s degree in a relevant field

Herramientas

GRC tool

Descripción del empleo

In this role you help safeguard IT and business processes by identifying, assessing, and mitigating cybersecurity risks. You will collaborate with the Cyber & IT Risk Team to implement risk controls, policies, and standards across the organization. You’ll document gaps, guide remediation, and support regulatory compliance (ISO27001, NIST, GDPR). You contribute to building a robust Audit function within Information Security and partner with cross-functional teams to drive secure, scalable practices. This is a chance to shape security governance in a growth-focused, technology-enabled company.

• Build and maintain the Information Security Audit function
• Manage and mature the IT risk control framework for effective operation and monitoring
• Document control gaps, provide remediation guidance, and drive mitigation projects
• Develop security policies, standards, and procedures for standardization of controls
• Perform risk assessments across IT and business processes and propose mitigations
• Ensure risk and remediation plans are addressed by owners
• Support regulatory compliance activities (ISO27001, NIST, GDPR)
• Audit and document processes and prepare management reports
• Bachelor’s degree in a relevant field
• 4+ years’ experience in Information Security, IT risk and compliance
• Experience in defining and executing an IT risk control framework for internal and third-party environments
• Experience performing information security and IT assessments and compliance/maturity assessments
• Ability to manage risks, vulnerabilities, and non-conformities; document and mitigate
• KPIs/KRIs definition and reporting for stakeholders
• Experience in IT controls audits and remediation with internal and third parties
• Strong planning, problem-solving, and complex technical issue analysis
• Knowledge of regulatory requirements (SOC 2, NIST, GDPR, COBIT, ITIL)
• Professional relationship-building and cross-functional collaboration
• English proficiency; willingness to travel
• Effective communication
• Team collaboration
• Relationship building
• GRC tool (unspecified)
• MS Office
• Information Security controls auditing