Lead Security GRC (f/m/d)

Axpo Group; Madrid; Híbrido; EUR 110.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working hours

Meal allowances

Internet compensation

Training courses

Gym coverage

Health insurance

Descripción de la vacante

Axpo Group is seeking a cybersecurity leader to steer Group CISO Office governance, risk and compliance initiatives across our international energy business. You will lead the GRC function, implement ISMS, and drive maturity while coordinating with regulators, auditors, and senior leadership.

The role emphasizes translating policies into actionable programs, strengthening controls across IT, Cloud, OT, and ICs, and owning end-to-end information security processes.

Formación

• Experience in a GRC role within an enterprise environment.
• Knowledge of ISMS implementation (ISO/IEC 27001) and governance.
• Strong communication across functions and seniority levels.
• Familiarity with regulations such as NIS2, SOC reporting, or ISO/IEC 27002; CISSP/CISM certification is a plus.

Responsabilidades

• Lead and grow the GRC team, including line management, budget ownership, and defining the GRC strategy.
• Translate Axpo Group's security policies into actionable initiatives, aligning frameworks with local delivery and risk management.
• Strengthen governance, controls, and risk practices across IT, Cloud, OT & ICs environments.
• Drive cybersecurity maturity and compliance programs (e.g., ISMS, NIS2, trading and market operations), including risk treatment and remediation tracking.
• Own end-to-end information security processes such as compliance, risk management, third-party security, and incident response.
• Represent the GRC function to regulators, auditors, and Group leadership, and report on security posture through metrics and dashboards.

Conocimientos

GRC leadership

Team leadership

ISMS (ISO/IEC 27001)

Regulatory awareness (NIS2, SOC)

Cybersecurity concepts

Proactive, analytical mindset

Educación

Computer Science / IT / Information Security background

Descripción del empleo

Help shape Axpo's cybersecurity future. Join the Group CISO Office and lead group-wide security governance, risk and compliance initiatives across a dynamic, international energy business.

What you will do:

• Lead and grow the GRC team, including line management, budget ownership, and defining the GRC strategy

• Translate Axpo Group's security policies into actionable initiatives, aligning frameworks with local delivery and risk management

• Strengthen governance, controls, and risk practices across IT, Cloud, OT & ICs environments

• Drive cybersecurity maturity and compliance programs (e.g., ISMS, NIS2, trading and market operations), including risk treatment and remediation tracking

• Own end-to-end information security processes such as compliance, risk management, third-party security, and incident response

• Represent the GRC function to regulators, auditors, and Group leadership, and report on security posture through metrics and dashboards

What you bring & who you are:

• A background in Computer Science, IT, Information Security, or a related field

• Experience in a GRC role, ideally within an enterprise environment, with a solid understanding of cybersecurity concepts

• Experience leading and developing teams, with strong communication skills across functions and seniority levels

• Knowledge of ISMS implementation (e.g., ISO/IEC 27001), security risk management, and governance

• A proactive, pragmatic, and outcome-oriented mindset, with strong analytical and problem-solving skills

• Ideally, familiarity with regulations such as NIS2, SOC reporting, or ISO/IEC 27002, and a CISSP or CISM certification; knowledge of German or Spanish is a plus

Even if you don't meet all the requirements, we look forward to your application.

About the team:

You'll join the Group CISO Office, a collaborative team driving security governance across Axpo. We value open dialogue, diverse perspectives, and continuous learning as we grow GRC into a trusted service for the whole organization.

Benefits:

At our company, we strive to create a culture of continuous learning, personal growth, and inter- national community involvement. We're passionate about providing our employees with the tools and resources they need to succeed, and we're confident that you'll love being part of our team!

• Working Hours
  We offer flexible working hours to accommodate your work schedule. We can work part of our time remotely and the rest at our offices in Madrid, Torre Europa.

• Meal allowances

  You can enjoy delicious meals on us, no matter if you are working remotely or on-site.
  *Option to use it for public transportation or childcare instead.

• Internet Compensation
  We cover the cost of your home internet connection, as we understand how essential connectivity is in the modern workplace.

• Training courses
  Our company is committed to helping our employees grow and develop their skills, which is why we offer a variety of industry- specific training courses and a learning channel.

• Gym Coverage
  Stay active and healthy with our 90% coverage benefit, which provides access to the nearby gym: Forus Selection to keep you energized throughout the day

• Health Insurance
  We take the health and well-being of our employees seriously, which is why we offer a comprehensive health insurance plan and the option to extend it to your spouse and children.

At Axpo Group, we are dedicated to fostering a culture of non-discrimination, tolerance, and inclusion. As an equal opportunity employer, we welcome applications regardless of race and ethnicity, gender identity and expression, sexual orientation, age, disability, as well as socioeconomic, cultural, and religious background. We are committed to ensuring a respectful and inclusive recruiting process and workplace for everyone.