IT Compliance Manager

CONVOTIS Iberia; Elche; Híbrido; EUR 70.000 - 90.000; Jornada completa

Descripción de la vacante

CONVOTIS Iberia is seeking an IT Compliance Manager to strengthen our Governance, Risk and Compliance team. You’ll drive global compliance frameworks (ISO 27001, SOC 2, DORA, NIS2), design controls, remediate findings, and lead audits ensuring data protection and regulatory alignment across Europe.

You will collaborate with engineering teams to translate regulations into practical standards, manage cross-functional projects, and foster a security-first culture while traveling up to 20% within

Formación

• 6–8 years of hands-on IT compliance and data protection experience.
• Proven track record in leading SOC 2 and ISO 27001 audits.
• Strong knowledge of GDPR (AVV/TOMs) and familiarity with DORA/NIS2.
• Certifications such as CISA/CISM/CRISC/CISSP are a plus.
• Excellent communication and stakeholder-management skills.

Responsabilidades

• Drive and manage implementation and improvement of global compliance programs.
• Design controls, remediate audit findings, and manage end-to-end audits.
• Ensure rigorous data protection compliance across engagements.
• Collaborate with engineering to translate regulatory requirements into actionable standards.
• Lead cross-functional compliance and security projects with a hands-on approach.
• Engage with internal and external stakeholders to foster a security-first culture.

Conocimientos

English fluency

Regulatory knowledge

Stakeholder management

Communication

Educación

Bachelor's or Master’s degree in IT / Information Security

Herramientas

ISO 27001 / SOC 2 knowledge

Descripción del empleo

Teralco Group was founded in 2002 and became CONVOTIS Iberia in 2024. Since then, we have been committed to helping companies improve their performance and efficiency through the use of innovative technology. With over 20 years of experience, we have supported numerous businesses in implementing technological solutions.

At Teralco Group, You matter — your experience and skills count, your opinion influences our decision-making, and you choose the path for your professional growth.

What’s a day like at CONVOTIS Iberia?

You decide when your workday begins, and you finish when you want.

If one day you work longer or need to leave earlier for personal reasons, you can make it up another day with no problem. Choose whether to work from the office or from home — you have 100% #flexibility.

If you come to the office, you’ll find free coffee, candy, and even a foosball table to relax.

If something happens during your workday, you’re covered with health insurance. So, no worries — you’re protected.

Over the coming months, you can also join our office events (beer days, gamefests, etc.), outdoor activities in the mountains, fun company days (twice a year), padel matches, and much more.

You’ll enjoy your vacation whenever you want, and you’ll always have a great team of people by your side. #Closeness is one of our core values.

Looking ahead, we want you to grow with us. That’s why you’ll have a wide and varied career path depending on what you’re looking for, and we’ll pay for the certifications you need. We also provide English lessons and training opportunities. Want to switch technologies? We’re proud to say that we see this as a positive step and will support you through the change. The #training opportunities are yours to choose.

All of this is part of our philosophy and what we call #CONVOTISLife. Are you in?

Role Summary

As a leading European Managed Service Provider (MSP), we ensure secure, reliable, and compliant digital infrastructures for our clients, including highly regulated sectors like government tools. To strengthen our Governance, Risk, and Compliance (GRC) team, we are looking for a hands‑on and driven IT Compliance Manager.

Role & Responsibilities

• Drive and manage the implementation, maintenance, and continuous improvement of global compliance frameworks (ISO 27001, SOC 2, DORA, NIS2).

• Design effective controls, remediate audit findings/deviations, and manage end‑to‑end certification audits.

• Ensure rigorous data protection compliance, focusing on GDPR implementation (including Data Processing Agreements/AVV and Technical and Organizational Measures/TOMs).

• Collaborate closely with technical and engineering teams, translating regulatory requirements into practical, operational standards.

• Manage cross‑functional compliance and security projects with a strong hands‑on approach.

• Engage with internal and external stakeholders, utilizing strong negotiation and persuasion skills to foster a security‑first culture.

Requirements

• Experience: 6–8 years of hands‑on professional experience in IT compliance and data protection implementation, ideally within a comparable MSP, IT, or SaaS environment.

• Framework Expertise: Proven track record in developing controls, closing audit deviations, and successfully guiding SOC 2 and ISO 27001 audits.

• Regulatory Knowledge: Deep, practical experience with GDPR (AVV, TOMs) as well as mandatory hands‑on familiarity with DORA and NIS2 frameworks.

• Certifications: Relevant IT security/compliance certifications (e.g., CISA, CISM, CRISC, CISSP, or ISACA GDPR practitioner) are a strong plus.

• Soft Skills: Open, eager‑to‑learn personality with a true "hands‑on" mentality, paired with excellent communication, persuasion, and stakeholder‑management skills.

• Language: Fluent in English (written and spoken); additional European languages are an advantage.

• Spanish or EU residency and working permit within Spain.

Working environment & conditions

• Work Model: Hybrid / Remote flexibility.

• Travel: Willingness to travel up to 20% across our European locations.

Get to know us

Igualdad de Oportunidades en el Empleo

En CONVOTIS Iberia, estamos firmemente comprometidos con la igualdad de oportunidades en el empleo, asegurando un entorno inclusivo y respetuoso para todas las personas, sin importar su raza, nacionalidad, etnia, color de piel, religión, sexo, orientación sexual, edad, ciudadanía, estado civil, discapacidad, género, identidad o expresión de género, o su condición de veterano.

Asimismo, en cumplimiento con lo establecido en el Real Decreto 1026/2024 y en nuestro compromiso con los más altos estándares de diversidad e inclusión, establecemos criterios claros y concretos para garantizar un proceso de selección y contratación que priorice la formación y la idoneidad de cada persona para el puesto de trabajo. Ponemos especial atención en la no discriminación por orientación sexual, identidad de género o expresión de género.

En CONVOTIS Iberia, creemos que la diversidad enriquece nuestros equipos y nos impulsa hacia un futuro más justo, equitativo e inclusivo.