Senior GRC Analyst: SaaS Security & Customer Assurance

Onetrust-; Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare coverage

Flexible PTO

Equity RSUs

Bonuses

Descripción de la vacante

OneTrust is seeking a Senior Information Security GRC Analyst to join our Madrid-based InfoSec GRC team. You will own a high volume of end-to-end customer security questionnaires (CAQs), RFP security sections, and assurance artifacts, delivering accurate, defensible responses supported by SOC reports, ISO certificates, and internal evidence.

You will partner with Sales, Legal, Privacy, Security, and Product to validate responses, resolve gaps, and explain security controls to customers.

Formación

• 2-5 years of relevant experience in information security, security compliance, GRC, security assurance, third-party risk, or customer trust functions.
• Familiarity with common frameworks and attestations: SOC 2, ISO 27001, NIST, CIS, PCI DSS, HIPAA, GDPR, etc.
• Strong understanding of security fundamentals (access control, encryption, vulnerability management, secure SDLC, incident response).
• Experience collaborating cross-functionally (Security, Legal, Privacy, Engineering, Sales).
• Excellent written and verbal communication skills; ability to translate technical controls into customer-ready responses.
• Strong organizational skills; ability to manage multiple requests with competing deadlines.

Responsabilidades

• Own a high volume of end-to-end completion of customer security questionnaires (CAQs), RFP security sections, and assurance artifacts (SIG, CAIQ, etc).
• Provide accurate, defensible responses by leveraging internal evidence repositories (SOC reports, ISO certificates, policies, diagrams, pen test summaries).
• Partner with internal stakeholders to validate responses and resolve gaps.
• Meet with customers to explain security controls, risk posture, and compliance commitments; tailor depth for technical and non-technical audiences.
• Support Sales and Customer Success by addressing security objections and enabling procurement cycles.
• Perform security reviews of contracts, DPAs, and customer security terms; identify requirements and negotiate positions with Legal and Security leadership.
• Track contractual security commitments and ensure they are feasible and aligned with control coverage.
• Improve team efficiency through standardization, playbooks, and response libraries.
• Contribute to internal readiness by keeping evidence current and recommending process improvements.

Conocimientos

Customer oriented

Risk based thinking

Attention to detail

Strong communication

Cross-functional collaboration

Ability to work under SLA

Descripción del empleo

OneTrust is seeking a Senior Information Security GRC Analyst to join our Madrid-based InfoSec GRC team. You will own a high volume of end-to-end customer security questionnaires (CAQs), RFP security sections, and assurance artifacts, delivering accurate, defensible responses supported by SOC reports, ISO certificates, and internal evidence.

You will partner with Sales, Legal, Privacy, Security, and Product to validate responses, resolve gaps, and explain security controls to customers.