Remote Information Security Manager: GRC & Compliance Leader

Maisa; Islas Canarias; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

Maisa is seeking an Information Security Manager to own and continuously improve our GRC program within Governance, Risk and Compliance. You will lead SOC 2 Type II and ISO/IEC 27001:2022 through audits and certification, and keep them running as we scale.

The role covers policy, risk, third‑party risk, and client security reviews, with hands‑on responsibility for audits and remediation. You will collaborate with Engineering, Security, Legal and Ops to turn frameworks into practical controls,

Qualifications

• 5+ years in information or cyber security, governance, risk and compliance.
• Hands-on SOC 2 or ISO 27001 program experience with at least one audit.
• Strong knowledge of ISO 27001:2022, ISO 27002, SOC 2 criteria, and ISMS operation.
• Experience designing and documenting controls, not just gathering evidence for others.
• Hands-on third-party risk management and enterprise security questionnaires.
• Strong governance, risk management, and security process understanding.

Responsibilities

• Lead SOC 2 Type II and ISO 27001 programs from readiness to certification and maintain them.
• Shape the certification roadmap for additional frameworks as client demand grows.
• Run the ISMS day to day: policies, controls, internal audits, and management reviews.
• Coordinate control implementation and continuous assessment across multiple functions.
• Own company-wide information security and AI risk management processes and risk register.
• Lead third-party risk management, vendor due diligence, and security reviews.
• Respond to enterprise customer security assessments and audit requests.
• Maintain recurring security processes with evidence across systems and teams.

Skills

SOC 2 Type II

ISO 27001

Auditing

GRC

Risk assessment

Control testing

TPRM

Incident response

AWS & Kubernetes

GDPR awareness

Executive reporting

Project management

Autonomy

Tools

Vanta

Drata

Secureframe

Job description

Maisa is seeking an Information Security Manager to own and continuously improve our GRC program within Governance, Risk and Compliance. You will lead SOC 2 Type II and ISO/IEC 27001:2022 through audits and certification, and keep them running as we scale.

The role covers policy, risk, third‑party risk, and client security reviews, with hands‑on responsibility for audits and remediation. You will collaborate with Engineering, Security, Legal and Ops to turn frameworks into practical controls,