Security Presales Specialist

EQS Group; Bellprat; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Meal vouchers

Private health insurance

Mental health counselling

24 days paid vacation

Hybrid-working model

Job summary

EQS Group is seeking a Customer-facing Security Specialist embedded in the Sales organization to bridge customers with EQS security teams. You will educate customers on the security proposition, gather requirements, and drive security-driven actions across Legal, Engineering, and Product teams.

You will lead security discussions, support questionnaires, and coordinate risk-based decisions while helping to shape the Trust Portal and respond to audits and attestations.

Qualifications

• Strong foundation in information security management, risk, and compliance in a customer-facing context.
• Ability to explain technical topics simply and credibly (cloud security, IAM, encryption, logging/monitoring, vulnerability management, SDLC, incident response).
• Experience supporting typical third-party/security due diligence practices, including financial services customers.
• Excellent written and verbal communication; able to produce crisp questionnaire answers and present to technical and executive audiences.
• Commercial mindset: pragmatic, solution-oriented, able to balance risk and deal with timelines.
• Working knowledge of EU regulatory expectations, especially DORA and NIS2, and their impact on SaaS providers.
• Basic knowledge of AI security and governance topics relevant to customer questions (data/model risk, prompt/injection risks).

Responsibilities

• Lead customer security discussions and due diligence activities (calls, workshops, questionnaires, steering committees, RFP/RFI).
• Explain EQS's security posture and provide evidence (controls, attestations, architecture summaries).
• Coordinate inputs across Information Security, Engineering, Product Management, and Legal; manage escalations and exceptions.
• Maintain the questionnaire/answers database (standard answers, versioning, evidence links, control mappings).
• Support completion of customer security questionnaires and ensure accuracy, consistency, and timely delivery.
• Translate recurring customer asks into actionable security improvements and product feature requests.
• Support risk-based decisions and track requirement status; communicate clearly to Sales and customers.
• Keep alignment with the CISO; involve for strategic customers and major exceptions; assist with contract negotiations.
• Help maintain and improve the EQS Trust Portal content in line with governance and review cycles.

Skills

Information security

Risk management

Compliance

Cloud security

IAM

Encryption

Logging & monitoring

Vulnerability management

SDLC

Incident response

Job description

JOIN OUR TEAM

Customer-facing security specialist embedded in the Sales organization with a dotted line to the CISO. The role supports commercial sales by acting as an interface between the customer and the internal EQS organizations (Information Security, Engineering, Product Management, Legal) with the focus of establishing Trust and educating customers on EQS's security proposition. Beyond that, they elevate risks; manage non-standard commitments; coordinate fulfillment of information security customers’ requests; and capture and translate requirements into internal actions.

EQS Groupis a leading international cloud software provider in theareasof Compliance & Ethics, Data Privacy, Sustainability Management, and Investor Relations. We help thousands of companies worldwide to cultivate trust by simplifying complex processes, ensuring transparency, and enabling clear communication with stakeholders.

Our success is built on our people. We bring together talented individuals who care about doing meaningful work, take pride in what they do, and support one another to achieve more together. We believe passion and trustaren't just values - they're at the core of how we operate, every day.

Our mission is to Create Trusted Companies. If you share our passion for our mission, we’d love to have you help us turn it into reality.

OUR CULTURE DRIVES OUR BENEFITS

• You're important.A trusting environment and lifelong learning for your individual development. Set personal development goals, receive support and regular feedback. We support you in equipping yourself for success.
• Living our values.Take responsibility for a variety of tasks, find out what you like to work on, and find your way to make your own personal impact with us!
• Great atmosphere.Regular team events, parties, and a talented international team with a common goal that unites us all.
• Be part of an exciting journey. Contribute to our success story of becoming the leading European cloud provider for corporate compliance and investor relations solutions.
• Work-life balance is a must. Work in a modern office in the heart of Barcelona. In addition, we offer flexibility through our hybrid-working model, conveniently arrange your working hours, and the ability to work from abroad within the EU. We provide you with 24 days of paid vacation - because we also value your free time.
• Special Perks Just for You. We offer you other exciting benefits, such as meal vouchers for your healthy breaks as well as corporate shopping benefits.
• Health is a priority.We offer private health insurance, and you can also benefit from our corporate mental health counselling!

YOUR IMPACT

Pre-sales Support – Product & Product Security

• Help to drive commercial booking activity as the primary customer-facing expert on platform architecture, infrastructure, and security program implementation.
• Lead customer security discussions and due diligence activities (calls, workshops, questionnaires, customer steering committees, RFP/RFI) and support the coordination of customer-driven audits and security tests.
• Explain EQS's security posture and provide evidence (controls, policies, attestations/certifications, architecture summaries, SDLC practices).
• Develop a deep understanding of the EQS product suite and the use cases that are supported by our solutions.
• Coordinate inputs across Information Security, Engineering, Product Management, and Legal; manage escalations and exceptions.

Questionnaires & RfX

• Maintain the questionnaire/answers database (standard answers, versioning, evidence links, control mappings, review cadence).
• Support completion of customer security questionnaires; ensure accuracy, consistency, and timely delivery.

Requirements intake & Risk handling

• Translate recurring customer asks into actionable security improvements and product/engineering feature requests with business rationale.
• Capture specific customer security requirements, map to EQS controls, identify gaps, and propose options (standard position, compensating controls, roadmap, or risk acceptance).
• Support risk‑based decisions and track requirement status; communicate clearly to Sales and customers.

Contracting & Internal improvement loop

• Keep alignment with the EQS CISO; involve the CISO for strategic customers, elevated risk acceptance, major exceptions, or executive‑level assurances.
• Partner with Legal during contract negotiation to address security/privacy/compliance clauses and ensure commitments are deliverable, escalating to the CISO where necessary.
• Help to maintain and improve the EQS Trust Portal content in line with publication governance and review cycles.

THIS IS YOU

• Strong foundation in information security management, risk, and compliance in a customer‑facing context.
• Ability to explain technical topics simply and credibly (cloud security, IAM, encryption, logging/monitoring, vulnerability management, SDLC, incident response).
• Experience supporting typical third-party/security due diligence practices, including financial services customers.
• Excellent written and verbal communication; able to produce crisp questionnaire answers and present to technical and executive audiences.
• Commercial mindset: pragmatic, solution‑oriented, able to balance risk and deal with timelines.
• Working knowledge of EU regulatory expectations, especially DORA and NIS2, and their impact on SaaS providers (resilience, ICT risk, incident reporting, supplier risk, governance).
• Basic knowledge of AI security and governance topics relevant to customer questions (e.g., data/model risk, prompt/injection risks, supplier controls, monitoring/misuse).

CERTIFICATIONS

• Preferred (not compulsory): CISSP, CISM, CRISC, CISA (or equivalent), Cloud security certifications (e.g., CCSK/CCAK).
• Nice to have: ISO/IEC 27001 auditor experience; privacy certification/experience.