Information Security Officer GRC (F/M/D)

Axpo Group; España; Híbrido; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

A dynamic energy company is seeking a passionate professional to drive governance, risk, and compliance initiatives. The role requires over 4 years of GRC experience, particularly in enterprise settings. You'll translate security policies into actionable items and lead efforts in compliance and security risk management. The position offers flexibility with hybrid working hours and a range of benefits, including health insurance and training opportunities.

Servicios

Flexible working hours

Meal allowances

Internet compensation

Microsoft ESI Certifications

Training courses

Gym coverage

Health insurance

Formación

• 4+ years of experience in a GRC role, preferably in enterprise environments.
• Deep knowledge of ISMS implementation (ISO/IEC 27001) and security risk management.
• Proven leadership in influencing senior stakeholders.

Responsabilidades

• Translate security policies into actionable initiatives.
• Establish and improve governance and controls in IT and Cloud.
• Govern and optimize information security processes.

Conocimientos

Governance, Risk, and Compliance (GRC)

Information Security Management Systems (ISMS)

Analytical skills

Communication skills

Problem-solving skills

Educación

Background in Computer Science, IT, or Information Security

CISSP or CISM certification

Descripción del empleo

Workload: 80-100%

Join Axpo's dynamic security team and help shape the future of energy infrastructure protection. We're looking for a passionate professional to drive our governance, risk, and compliance initiatives in a collaborative environment that values innovation and expertise.

What you will do:

• Translate Axpo Group's security policies into actionable initiatives across business areas
• Establish and improve governance, controls, and risk practices in IT, Cloud, OT & ICs landscapes
• Plan and execute cybersecurity maturity and compliance management (ISMS domains, NIS2-relevant capabilities)
• Govern and optimize end-to-end information security processes including compliance, risk management, and incident response
• Serve as subject‑matter expert coordinating with internal control functions and external auditors
• Drive data-driven decision‑making through metrics, KPIs, and dashboards for executive reporting

What you bring & who you are:

• 4+ years of experience in a GRC role, preferably in enterprise environments
• Background in Computer Science, IT, Information Security, or related field
• Deep knowledge of ISMS implementation (ISO/IEC 27001) and security risk management
• Proven leadership in influencing senior stakeholders and driving cross‑functional outcomes
• Strong analytical, communication, and problem‑solving skills with a proactive mindset
• Ideally, CISSP or CISM certification and familiarity with regulations like NIS2 or SOC reporting

About the team:

You’ll join a forward‑thinking security team that champions collaboration and continuous learning. We foster an inclusive environment where diverse perspectives drive innovation and every team member contributes to protecting critical energy infrastructure.

Benefits:

At our company, we strive to create a culture of continuous learning, personal growth, and inter‑national community involvement. We’re passionate about providing our employees with the tools and resources they need to succeed, and we’re confident that you’ll love being part of our team!

• Working Hours
  We offer flexible working hours to accommodate your work schedule. 60% on remote and 40% at our offices in Madrid, Torre Europa.
• Meal allowances
  You can enjoy delicious meals on us, no matter if you are working remotely or on‑site.
  *Option to use it for public transportation or childcare instead.
• Internet Compensation
  We cover the cost of your home internet connection, as we understand how essential connectivity is in the modern workplace.
• Microsoft ESI Certifications
  Access to the ESI (Enterprise Skills Initiative) program certification, provides hands‑on training for learning and enhancing technical skills and knowledge of Microsoft and Azure technologies.
• Training courses
  Our company is committed to helping our employees grow and develop their skills, which is why we offer a variety of industry‑specific training courses and a learning channel.
• Gym Coverage
  Stay active and healthy with our 90% coverage benefit, which provides access to the nearby gym: Forus Selection to keep you energized throughout the day.
• Health Insurance
  We take the health and well‑being of our employees seriously, which is why we offer a comprehensive health insurance plan and the option to extend it to your spouse and children.

At Axpo Group, we are dedicated to fostering a culture of non‑discrimination, tolerance, and inclusion. As an equal opportunity employer, we welcome applications regardless of race and ethnicity, gender identity and expression, sexual orientation, age, disability, as well as socioeconomic, cultural, and religious background. We are committed to ensuring a respectful and inclusive recruiting process and workplace for everyone.

Department IT / Technology Role Permanent position Locations Madrid Remote status Hybrid Employment type Full‑time