Remote GRC Security Manager: SOC 2 & ISO 27001 Lead

Maisa; Cantabria; Remote; EUR 70,000 - 95,000; Full time

Job summary

Maisa builds AI for the enterprise, focusing on regulated industries such as banking. We are seeking an Information Security Manager in Governance, Risk and Compliance to own and continuously improve Maisa’s security compliance program.

Your first priority is leading SOC 2 Type II and ISO/IEC 27001:2022 through audit and certification, then keeping both running. This hands‑on role covers policy, governance, risk management, third‑party risk, and client security reviews, with scope to scale as

Qualifications

• 5+ years in information or cyber security, with governance, risk and compliance focus.
• Hands‑on experience implementing or operating SOC 2 or ISO/IEC 27001 programs, including audits or certifications.
• Understanding of ISO 27001:2022, ISO 27002 controls, SOC 2 criteria, and ISMS operations.
• Experience designing and implementing controls, not just gathering evidence.
• Proven ability to manage third‑party risk and respond to enterprise security questionnaires.

Responsibilities

• Lead SOC 2 Type II and ISO 27001 programs from readiness to certification and ongoing operations.
• Shape certification roadmaps (e.g., AI governance) and plan audits and tooling.
• Run the ISMS day‑to‑day: policies, controls, internal audits, and management reviews.
• Coordinate control implementation across Engineering, Security, Platform, Operations, Legal, Finance, and others.
• Manage risk registers, treatment plans and risk owner sign‑offs; lead third‑party risk assessments.
• Lead responses to enterprise customer security assessments and due‑diligence questionnaires.

Skills

SOC 2

ISO 27001

Governance, Risk & Compliance

Audits & Certifications

Third‑party risk management

GRC program ownership

Cloud/DevOps integration (AWS, K8s)

Stakeholder collaboration

Tools

Vanta

Drata

Secureframe

Job description

Maisa builds AI for the enterprise, focusing on regulated industries such as banking. We are seeking an Information Security Manager in Governance, Risk and Compliance to own and continuously improve Maisa’s security compliance program.

Your first priority is leading SOC 2 Type II and ISO/IEC 27001:2022 through audit and certification, then keeping both running. This hands‑on role covers policy, governance, risk management, third‑party risk, and client security reviews, with scope to scale as