Lead Security GRC m/f/d

Axpo Group; Madrid; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working hours

Partial remote work

Meal allowance

Internet reimbursement

Training courses

Gym coverage

Health insurance

Descripción de la vacante

Axpo Group is seeking a senior GRC leader to shape cybersecurity governance across the organization, spanning IT, cloud, OT, and ICS environments. You will drive ISMS, risk management, and regulatory compliance, reporting metrics to Group leadership.

Based in Madrid with a hybrid work setup, you will grow the GRC team, own budget, translate security policies into initiatives, and collaborate with regulators and auditors to strengthen the security posture.

Formación

• Experience in a GRC role within an enterprise environment.
• Knowledge of ISMS implementation (ISO/IEC 27001).
• Familiarity with regulations such as NIS2, SOC reporting, or ISO/IEC 27002.
• CISSP or CISM certification is a plus, knowledge of German or Spanish is a plus.

Responsabilidades

• Lead and grow the GRC team, including line management, budget ownership, and defining the GRC strategy.
• Translate Axpo Group's security policies into actionable initiatives, aligning frameworks with local delivery and risk management.
• Strengthen governance, controls, and risk practices across IT, Cloud, OT & ICS environments.
• Drive cybersecurity maturity and compliance programs (e.g., ISMS, NIS2, trading and market operations), including risk treatment and remediation tracking.
• Own end-to-end information security processes such as compliance, risk management, third-party security, and incident response.
• Represent the GRC function to regulators, auditors, and Group leadership, and report on security posture through metrics and dashboards.

Conocimientos

GRC Leadership

ISMS ISO27001

Risk Management

Regulatory Compliance

Communication Skills

Team Development

Educación

Background in Computer Science / IT / Information Security

Descripción del empleo

Help shape Axpo's cybersecurity future. Join the Group CISO Office and lead group-wide security governance, risk and compliance initiatives across a dynamic, international energy business.

What you will do:

• Lead and grow the GRC team, including line management, budget ownership, and defining the GRC strategy
• Translate Axpo Group's security policies into actionable initiatives, aligning frameworks with local delivery and risk management
• Strengthen governance, controls, and risk practices across IT, Cloud, OT & ICS environments
• Drive cybersecurity maturity and compliance programs (e.g., ISMS, NIS2, trading and market operations), including risk treatment and remediation tracking
• Own end-to-end information security processes such as compliance, risk management, third-party security, and incident response
• Represent the GRC function to regulators, auditors, and Group leadership, and report on security posture through metrics and dashboards

What you bring & who you are:

• A background in Computer Science, IT, Information Security, or a related field
• Experience in a GRC role, ideally within an enterprise environment, with a solid understanding of cybersecurity concepts
• Experience leading and developing teams, with strong communication skills across functions and seniority levels
• Knowledge of ISMS implementation (e.g., ISO/IEC 27001), security risk management, and governance
• A proactive, pragmatic, and outcome-oriented mindset, with strong analytical and problem-solving skills
• Ideally, familiarity with regulations such as NIS2, SOC reporting, or ISO/IEC 27002, and a CISSP or CISM certification; knowledge of German or Spanish is a plus

About the team:

You’ll join the Group CISO Office, a collaborative team driving security governance across Axpo. We value open dialogue, diverse perspectives, and continuous learning as we grow GRC into a trusted service for the whole organization.

At our company, we strive to create a culture of continuous learning, personal growth, and inter- national community involvement. We're passionate about providing our employees with the tools and resources they need to succeed, and we're confident that you'll love being part of our team!

• Working Hours
• We offer flexible working hours to accommodate your work schedule. We can work part of our time remotely and the rest at our offices in Madrid, Torre Europa.
• You can enjoy delicious meals on us, no matter if you are working remotely or on-site.
• *Option to use it for public transportation or childcare instead.
• Internet Compensation
• We cover the cost of your home internet connection, as we understand how essential connectivity is in the modern workplace.
• Training courses
• Our company is committed to helping our employees grow and develop their skills, which is why we offer a variety of industry-specific training courses and a learning channel.
• Gym Coverage
• Stay active and healthy with our 90% coverage benefit, which provides access to the nearby gym: Forus Selection to keep you energized throughout the day
• Health Insurance
• We take the health and well‑being of our employees seriously, which is why we offer a comprehensive health insurance plan and the option to extend it to your spouse and children.

At Axpo Group, we are dedicated to fostering a culture of non-discrimination, tolerance, and inclusion. As an equal opportunity employer, we welcome applications regardless of race and ethnicity, gender identity and expression, sexual orientation, age, disability, as well as socioeconomic, cultural, and religious background. We are committed to ensuring a respectful and inclusive recruiting process and workplace for everyone.