It Compliance And Privacy Specialist

buscojobs España; Málaga; Presencial; EUR 45.000 - 65.000; Jornada completa

Descripción de la vacante

A global leader in Testing, Inspection, and Certification is hiring a Compliance And Privacy Specialist to support their cybersecurity strategy. This role involves managing compliance frameworks, conducting risk assessments, performing audits, and ensuring adherence to privacy regulations, including GDPR. The ideal candidate will have a Master's degree in a relevant field and must hold key certifications with at least 5 years of practical experience.

Formación

• 5+ years of experience in cybersecurity focused on compliance and privacy.
• Experience in implementing/auditing ISO 27001 and NIST CSF.
• Relevant certifications like CISSP and CISM are preferred.

Responsabilidades

• Manage internal compliance frameworks for Privacy and NIST CSF.
• Conduct risk analyses for internal projects and new applications.
• Participate in the internal audit program for privacy compliance.

Conocimientos

Compliance Management

Privacy Management

Risk Assessment

Information Security

Educación

Master's degree in Computer Science

Master's degree in Information Security

Herramientas

ISO 27001 Lead Auditor

NIST CSF Practitioner

Descripción del empleo

Our client is a global leader in Testing, Inspection and Certification (TIC), delivering high quality services to help clients meet the growing challenges of quality, safety, environmental protection, and social responsibility.

We are hiring a Compliance And Privacy Specialist to join the global security team.

To support the Cybersecurity GRC Manager in implementing and maintaining the organization's cybersecurity strategy, with a focus on compliance, privacy, and risk management aligned with NIST CSF, ISO 27001, and privacy regulations.

Key Responsibilities :

1. Compliance and Privacy Management :

• Manage internal compliance frameworks for Privacy and NIST CSF
• Translate security policies into actionable plans for users, project teams, and businesses
• Support implementation and maintenance of ISO 27001 certification
• Ensure compliance with privacy regulations (GDPR, LGPD, CPRA, etc.)

2. Risk Assessment and Management :

• Perform risk analyses for internal projects and new business applications
• Conduct cloud risk analyses and provide security recommendations
• Support the Cybersecurity GRC Manager in maintaining the organization's risk register

3. Audit and Assessment :

• Participate in the internal audit program, focusing on privacy and NIST CSF compliance
• Improve audit methodologies and manage audit schedules
• Perform privacy audits and NIST CSF assessments

4. Security by Design :

• Implement and manage the "security by design" framework
• Advise project teams on security measures from project initiation to go-live

5. Stakeholder Management :

• Act as a point of contact for business teams on cybersecurity topics
• Manage and respond to clients' security questionnaires
• Conduct security maturity reviews and provide recommendations
• Stay updated on the latest developments in information security standards and ecosystem
• Contribute to the development of an ISS knowledge base within the organization
• Support the implementation of security programs (e.g., data classification, DLP)

Education :

Master's degree in Computer Science, Information Security, or related field

Relevant certifications (e.g., CISSP, CISM, ISO 27001 Lead Auditor, NIST CSF Practitioner)

Experience :

5+ years of experience in cybersecurity, with a focus on compliance and privacy

Experience in implementing / auditing ISO 27001, NIST CSF, and privacy regulations

Experience in information systems risk evaluation and compliance program implementation