Senior GRC Engineer — Hybrid FinTech Security & Compliance

Kantox; Barcelona; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Sponsored learning and development

Private health insurance

Language lessons

Relocation package

Flexible working hours

Hybrid work model (4 days in office, 1

day from home)

31 days annual leave

Gym discounts

Restaurant Ticket with monthly credit

Fresh fruit and unlimited coffee

Barcelona office with 360° views

Job summary

Kantox is seeking a Senior Security GRC Engineer to join our Security team in Barcelona. You will own the daily operation of our control framework to maintain ISO 27001, SOC 2, DORA, and GDPR compliance, enabling the CISO to focus on strategy.

You will automate evidence collection, coordinate with Tech, Legal and Risk teams, and drive audits from gap assessments to closure. English fluency and a pragmatic, autonomous approach are essential.

Qualifications

• 5+ years of experience in GRC, security compliance, or risk roles.
• Experience running ISO 27001 and SOC 2 Type II cycles.
• Mastery of ISO 27005 risk methodologies.
• Ability to automate with scripts and APIs.
• Fluent in English.
• Autonomous and rigorous with deadlines.

Responsibilities

• Own control calendar and ensure evidence for recurring controls.
• Coordinate with control owners across Tech, Legal and Risk.
• Maintain assets, risks, and audits in CISO-Assistant.
• Close non-conformities and support audits.
• Automate evidence collection and reporting with integrations.

Skills

GRC experience

Python scripting

Automation

English proficiency

Tools

CISO-Assistant

Jira

Confluence

OKTA

AWS

Job description

Kantox is seeking a Senior Security GRC Engineer to join our Security team in Barcelona. You will own the daily operation of our control framework to maintain ISO 27001, SOC 2, DORA, and GDPR compliance, enabling the CISO to focus on strategy.

You will automate evidence collection, coordinate with Tech, Legal and Risk teams, and drive audits from gap assessments to closure. English fluency and a pragmatic, autonomous approach are essential.