InfoSec GRC Analyst: High-Volume Security Questionnaires

OneTrust; Madrid; Híbrido; EUR 50.000 - 70.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare coverage

Flexible PTO

Equity RSUs

Bonus opportunities

Retirement account support

Paid parental leave

Descripción de la vacante

OneTrust is seeking an Information Security GRC Analyst to support IT and InfoSec by delivering governance, risk, and compliance activities for the InfoSec GRC team.

The role focuses on handling a high volume of security questionnaires, customer engagements, and security reviews across contracts and terms while collaborating with Sales, Legal, Privacy, and Security teams to close gaps and drive secure outcomes.

Formación

• Familiarity with common frameworks and attestations: SOC 2, ISO 27001, NIST, CIS, PCI DSS, HIPAA, GDPR.
• Strong understanding of security fundamentals (access control, encryption, vulnerability management, secure SDLC).
• Experience collaborating cross-functionally with Security, Legal, Privacy, Engineering, Sales.

Responsabilidades

• Own high-volume completion of customer security questionnaires (CAQs), RFP security sections, and assurance artifacts.
• Provide accurate, defensible responses leveraging internal evidence repositories (SOC reports, ISO certificates, policies).
• Meet with customers to explain security controls, risk posture, and compliance commitments.
• Perform security reviews of contracts, DPAs, addenda, and customer security terms.
• Improve team efficiency through standardization and response playbooks.

Conocimientos

SOC 2

ISO 27001

NIST

CIS

PCI DSS

GDPR

Communication

Cross-functional collaboration

Security fundamentals

Educación

CISA

CISM

Descripción del empleo

OneTrust is seeking an Information Security GRC Analyst to support IT and InfoSec by delivering governance, risk, and compliance activities for the InfoSec GRC team.

The role focuses on handling a high volume of security questionnaires, customer engagements, and security reviews across contracts and terms while collaborating with Sales, Legal, Privacy, and Security teams to close gaps and drive secure outcomes.