Security GRC Engineer: Risk, Compliance & Awareness

Glovo Group

Barcelona

On-site

EUR 60,000 - 90,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Glovo is seeking a proactive Security GRC Engineer to help strengthen our global security posture and navigate a rapidly evolving regulatory environment. In this multifaceted role, you will support compliance frameworks (PCI DSS, ISO 27001, NIS2), internal and external audits, drive risk assessment and remediation, and pioneer security awareness programs within our organization.

Acting as a strategic bridge between technical engineering, legal, and business stakeholders, you will translate

Qualifications

BA/BS in Computer Science, Information Systems, or similar field.
Professional security certifications (CISSP, CISM, CISA, ISO 27001 Lead Implementer or equivalent).
Minimum 5 years of experience in the field or in a related area.
Experience with GRC platforms (RSA Archer, SAP GRC, StandardFusion, ServiceNow, OneTrust).
Experience with security frameworks (NIST, PCI DSS, GDPR, ISO 27001, NIS2).

Responsibilities

Develop, implement, and maintain security policies and procedures aligned with ISO 27001, NIST, PCI DSS, GDPR, NIS2, and EU AI Act.
Develop, execute and deliver security awareness programs for employees.
Conduct security risk assessments and drive remediation with a risk register.
Coordinate responses to customer security inquiries and due diligence questionnaires.
Support audits and coordinate with auditors, tracking findings and remediation.