Remote GRC Lead: ISO 27001 & Security Risk

Salmon Group Ltd; España; Remote; EUR 70,000 - 95,000; Full time

Benefits offered by this job

Medical insurance

Mental health support

Vacation days

Team trips to Manila

Company-provided tools

Fully remote work

Job summary

Salmon Group Ltd is seeking an experienced information security professional to own risk management, control assurance, and ISO 27001 ISMS governance across our regulated group spanning banking, consumer finance, and technology.

You will assess controls across IAM, cloud, endpoints, monitoring, vulnerability management, and data protection, turning data into clear risk reporting for governance forums and ongoing risk treatment.

Qualifications

• Strong practical experience in information security risk management and control assurance.
• Ability to turn risk information into concise governance reporting.
• Familiarity with ISO 27001 ISMS and risk registers.

Responsibilities

• Own the security risk process end to end, including assessment, treatment, and reporting.
• Assess control design and operating effectiveness across IAM, cloud, endpoints, monitoring, and data protection.
• Produce clear, decision-ready reporting for governance forums.

Skills

Information security

Risk management

GRC platforms

ISO 27001 knowledge

Tools

IAM

Cloud security

Endpoint security

Monitoring tools

Vulnerability management

Job description

Salmon Group Ltd is seeking an experienced information security professional to own risk management, control assurance, and ISO 27001 ISMS governance across our regulated group spanning banking, consumer finance, and technology.

You will assess controls across IAM, cloud, endpoints, monitoring, vulnerability management, and data protection, turning data into clear risk reporting for governance forums and ongoing risk treatment.