Security GRC Lead — Compliance, Risk & Awareness

Glovo Group; Barcelona; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Glovo Group is seeking a proactive Security GRC Engineer to strengthen our global security posture and navigate a rapidly evolving regulatory landscape. You will support compliance frameworks, audits, risk assessments, and security awareness programs across the organization.

This role requires collaboration with technical, legal, and business teams to translate complex demands into actionable controls. The ideal candidate has deep cybersecurity risk expertise, hands-on experience with GRC tools,

Qualifikationen

• BA/BS in Computer Science, Information Systems, or similar field.
• Professional security certifications (CISSP, CISM, CISA, ISO 27001 Lead Implementer or equivalent).
• Minimum 5 years of experience in the field or in a related area.
• Solid understanding and previous experience of security control frameworks (NIST, PCI DSS, GDPR, ISO 27001, NIS2).
• Hands-on experience with GRC platforms (e.g. RSA Archer, SAP GRC, ServiceNow, OneTrust, etc).
• Strong ability to manage and report on multiple projects, prioritizing efforts and collaborating with stakeholders.

Aufgaben

• Develop, implement, and maintain security policies and procedures aligned with ISO 27001, NIST, PCI DSS, GDPR, NIS2, and EU AI Act.
• Develop and deliver security awareness programs for employees.
• Conduct security risk assessments, propose mitigations, and maintain a risk register.
• Coordinate responses to customer security inquiries and due diligence questionnaires (SIG, CAIQ).
• Review contract modifications related to security, data protection, and privacy.
• Support end-to-end security certification and re-certification efforts (PCI DSS, ISO 27001, NIS2).
• Assist internal audits and remediate findings; work with auditors and stakeholders.

Kenntnisse

GRC experience

Regulatory compliance

Audits

Cloud security

Stakeholder mgmt

Ausbildung

BA/BS in Computer Science or related field

Tools

RSA Archer

SAP GRC

ServiceNow

OneTrust

Jobbeschreibung

Glovo Group is seeking a proactive Security GRC Engineer to strengthen our global security posture and navigate a rapidly evolving regulatory landscape. You will support compliance frameworks, audits, risk assessments, and security awareness programs across the organization.

This role requires collaboration with technical, legal, and business teams to translate complex demands into actionable controls. The ideal candidate has deep cybersecurity risk expertise, hands-on experience with GRC tools,