Remote GRC Specialist — ISO 27001 & GDPR Focus

Jobgether; España; A distancia; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

Competitive salary

Equity

Development budget

Health insurance

Annual retreat

Home office budget

Mentorship network

Descripción de la vacante

Jobgether is seeking a GRC Specialist based in Spain for a high-impact, fully remote role focused on governance, risk, and compliance. You will expand and automate compliance across ISO 27001, TISAX, SOC 2, GDPR, NIS 2, and other frameworks while delivering practical guidance and content for customers and auditors.

You will lead internal audits, own compliance content, and partner with Product and Engineering to translate requirements into platform initiatives, shaping security offerings and

Formación

• 3+ years of hands-on experience in information security, Governance, Risk, and Compliance or related field.
• Experience leading ISO 27001 certification projects as implementer/auditor or equivalent.
• Fluent English with strong written communication for auditors and executives.
• Hands-on experience with a GRC platform or similar tooling.
• Bachelor’s degree in Computer Science, Software Engineering, or related field.

Responsabilidades

• Build and maintain compliance frameworks within the platform (ISO 27001, GDPR, SOC 2, NIS 2, DORA, etc.).
• Lead internal audits from kickoff through final reporting.
• Provide practical guidance for ISO 27001 certifications and enablement content.
• Collaborate with Product and Engineering to translate gaps into product initiatives.
• Own compliance content, templates, and training materials.
• Support auditors and customers during audits and reviews.

Descripción del empleo

Jobgether is seeking a GRC Specialist based in Spain for a high-impact, fully remote role focused on governance, risk, and compliance. You will expand and automate compliance across ISO 27001, TISAX, SOC 2, GDPR, NIS 2, and other frameworks while delivering practical guidance and content for customers and auditors.

You will lead internal audits, own compliance content, and partner with Product and Engineering to translate requirements into platform initiatives, shaping security offerings and