Senior Security GRC Analyst — High-Impact SaaS Compliance

OneTrust; Madrid; Híbrido; EUR 55.000 - 75.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare coverage

Equity RSUs

Annual performance bonus opportunities

Paid parental leave

Retirement account support

Career development opportunities

Descripción de la vacante

OneTrust is seeking a Senior Information Security GRC Analyst to join the InfoSec GRC team in a fast-paced environment. You will drive responses to customer security questionnaires (CAQs), validate controls, and support risk discussions with Sales, Legal, Privacy, and Engineering.

The role emphasizes rigorous, evidence-based responses and scalable processes. You will engage with customers to explain security controls and commitments, review contracts and DPAs for security terms, and help mature

Formación

• 2–5 years of experience in information security, security compliance, GRC, security assurance, third-party risk, or customer trust functions.
• Experience responding to customer security questionnaires and due diligence requests.
• Familiarity with common frameworks and attestations: SOC 2, ISO 27001, NIST, CIS, PCI DSS, HIPAA, GDPR, etc.
• Strong understanding of security fundamentals (access control, encryption, vulnerability management, secure SDLC, incident response, logging/monitoring, vendor risk).
• Experience collaborating cross-functionally (Security, Legal, Privacy, Engineering, Sales).
• Excellent written and verbal communication skills—able to translate technical controls into clear, customer-ready responses.
• Strong organizational skills and ability to manage multiple requests with competing deadlines.

Responsabilidades

• Respond to high-volume customer security questionnaires and due diligence requests.
• Explain security controls, risk posture, and compliance commitments to customers.
• Perform security reviews of contracts, DPAs and customer security terms; identify security requirements and mitigations.
• Improve team efficiency through playbooks and response libraries; manage high volume of requests with SLAs.
• Mentor junior staff and contribute to overall team quality.

Conocimientos

GRC expertise

Security frameworks

Customer engagement

Cross-functional collaboration

Written communication

Descripción del empleo

OneTrust is seeking a Senior Information Security GRC Analyst to join the InfoSec GRC team in a fast-paced environment. You will drive responses to customer security questionnaires (CAQs), validate controls, and support risk discussions with Sales, Legal, Privacy, and Engineering.

The role emphasizes rigorous, evidence-based responses and scalable processes. You will engage with customers to explain security controls and commitments, review contracts and DPAs for security terms, and help mature