ISMS & GRC Compliance Engineer — Hybrid Role

GMV; Tres Cantos; Hybrid; EUR 55,000 - 90,000; Full time

Benefits offered by this job

Hybrid working model

Relocation package

Wellbeing program

Career development & language learning

Job summary

GMV is expanding its Corporate Cybersecurity Compliance team in Madrid. The role focuses on maintaining and evolving the ISMS, ensuring regulatory compliance, and strengthening information protection across GMV’s operations.

You will develop metrics, assess supplier and third‑party risk, and help implement security controls and governance processes. English proficiency is required and relocation help is available.

Qualifications

• Experience in Governance, Risk & Compliance (GRC), ISMS, audits and information security controls.
• Knowledge of ISO/IEC 27001, ENS, NIS2 and related regulations.
• Risk assessment and risk management methodologies.
• Security requirements for suppliers and third parties.
• Certifications such as CISM, CRISC, CISSP, CISA or Lead Auditor are a plus.
• Experience in regulated environments or critical infrastructure is valued.

Responsibilities

• Maintain and evolve the corporate ISMS.
• Contribute to processes ensuring information protection, resilience and compliance.
• Define and monitor KPIs/ KRIs and dashboards.
• Assess internal and third‑party risks and promote mitigation initiatives.
• Develop and review security policies, methodologies and documentation.
• Support security committees, management reviews and ISMS governance.

Skills

GRC experience

ISMS knowledge

ISO 27001

Audit experience

Job description

GMV is expanding its Corporate Cybersecurity Compliance team in Madrid. The role focuses on maintaining and evolving the ISMS, ensuring regulatory compliance, and strengthening information protection across GMV’s operations.

You will develop metrics, assess supplier and third‑party risk, and help implement security controls and governance processes. English proficiency is required and relocation help is available.