Senior Security GRC Leader — Strategy, Risk & Compliance

Axpo Group; Madrid; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible working hours

Partial remote work

Meal allowance

Internet reimbursement

Training courses

Gym coverage

Health insurance

Descripción de la vacante

Axpo Group is seeking a senior GRC leader to shape cybersecurity governance across the organization, spanning IT, cloud, OT, and ICS environments. You will drive ISMS, risk management, and regulatory compliance, reporting metrics to Group leadership.

Based in Madrid with a hybrid work setup, you will grow the GRC team, own budget, translate security policies into initiatives, and collaborate with regulators and auditors to strengthen the security posture.

Formación

• Experience in a GRC role within an enterprise environment.
• Knowledge of ISMS implementation (ISO/IEC 27001).
• Familiarity with regulations such as NIS2, SOC reporting, or ISO/IEC 27002.
• CISSP or CISM certification is a plus, knowledge of German or Spanish is a plus.

Responsabilidades

• Lead and grow the GRC team, including line management, budget ownership, and defining the GRC strategy.
• Translate Axpo Group's security policies into actionable initiatives, aligning frameworks with local delivery and risk management.
• Strengthen governance, controls, and risk practices across IT, Cloud, OT & ICS environments.
• Drive cybersecurity maturity and compliance programs (e.g., ISMS, NIS2, trading and market operations), including risk treatment and remediation tracking.
• Own end-to-end information security processes such as compliance, risk management, third-party security, and incident response.
• Represent the GRC function to regulators, auditors, and Group leadership, and report on security posture through metrics and dashboards.

Conocimientos

GRC Leadership

ISMS ISO27001

Risk Management

Regulatory Compliance

Communication Skills

Team Development

Educación

Background in Computer Science / IT / Information Security

Descripción del empleo

Axpo Group is seeking a senior GRC leader to shape cybersecurity governance across the organization, spanning IT, cloud, OT, and ICS environments. You will drive ISMS, risk management, and regulatory compliance, reporting metrics to Group leadership.

Based in Madrid with a hybrid work setup, you will grow the GRC team, own budget, translate security policies into initiatives, and collaborate with regulators and auditors to strengthen the security posture.