Staff GRC Analyst: Automation, Security & Compliance

Pleo; Madrid; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Pleo card

Lunch allowance

Private healthcare

Holiday entitlement

Hybrid/remote options

Additional holiday via salary Sacrific

Mental health support

Parental leave

Descripción de la vacante

Pleo is seeking a Staff GRC Analyst to strengthen our Information Security team as we scale our compliance program. You will automate governance, risk, and compliance workflows and collaborate with Risk, Compliance, Legal, Finance, and Engineering to maintain a strong security posture.

You will translate regulatory needs into technical specs, build evidence pipelines, and contribute to policy automation and audit readiness across ISO, PCI-DSS and DORA frameworks.

Formación

• Significant experience in Security GRC across internal and external audits.
• Experience using AI or coding to automate controls in practice.
• Strong understanding of cloud architectures (AWS or equivalent).
• Experience automating reporting for GRC programs with dashboards.
• Fintech, payments industry or IT audit background at least in part.
• Certifications such as CISM, CISSP, CISA, or PCI-related credentials; degree a plus.

Responsabilidades

• Automate legacy governance, risk and compliance systems including ISO/PCI/DORA frameworks.
• Engineer GRC workflows across ticketing, asset management, identity and cloud platforms.
• Design scalable GRC architectures for evidence collection and control testing.
• Draft and maintain security policies aligned to control standards.
• Automate security requests from customers and prospects with accurate responses.
• Automate third‑party vendor assessments and track gaps to resolution.
• Track and report compliance metrics for leadership visibility.
• Translate compliance requirements into technical specs for engineers.
• Coordinate multi-team workstreams with clear priorities and dependencies.
• Contribute to the broader Cybersecurity team initiatives.

Conocimientos

Security GRC experience

AI automation

Cloud security (AWS)

GRC reporting

Fintech/IT audit knowledge

Certifications (CISM/CISSP/CISA/PCI)

Educación

Cybersecurity/Engineering/CS/Math degree

Descripción del empleo

Pleo is seeking a Staff GRC Analyst to strengthen our Information Security team as we scale our compliance program. You will automate governance, risk, and compliance workflows and collaborate with Risk, Compliance, Legal, Finance, and Engineering to maintain a strong security posture.

You will translate regulatory needs into technical specs, build evidence pipelines, and contribute to policy automation and audit readiness across ISO, PCI-DSS and DORA frameworks.