Senior GRC & Information Security Analyst (Remote)

Jobgether; España; On-site; PHP 5,797,000 - 8,696,000; Full time

Benefits offered by this job

Competitive salary

Equity

Remote-first

Career growth

Cross-functional collaboration

International team

Job summary

Jobgether is seeking an Information Security Analyst, GRC based in Spain to join a remote-first security team operating across Europe. You will help strengthen the organization’s security and trust program while supporting customers and prospects through complex security reviews.

The role combines technical security knowledge with governance, risk, and compliance and third-party risk management, working with IT, Security, Legal, Sales, and Customer teams to communicate controls and manage risk.

Qualifications

• 7+ years of experience in information security, risk, compliance, security assurance, or a related discipline.

Responsibilities

• Complete security questionnaires, risk assessments, due-diligence requests, and security reviews for customers and prospects.
• Explain security controls, architecture, compliance posture, and risk management practices to Sales and Customer teams.
• Assess and manage risks with third-party vendors, SaaS providers, and service partners.
• Investigate and resolve compliance alerts using GRC tooling such as Vanta.
• Maintain risk assessment frameworks, methodologies, and supporting documentation.
• Track identified risks through remediation with internal stakeholders.
• Support compliance initiatives aligned with SOC 2, ISO 27001, NIST, GDPR, and HIPAA.
• Maintain risk registers and security policies with evidence.

Skills

Security governance

Risk management

Security frameworks

Communication

Vendor risk

Tools

GRC tooling

Job description

Jobgether is seeking an Information Security Analyst, GRC based in Spain to join a remote-first security team operating across Europe. You will help strengthen the organization’s security and trust program while supporting customers and prospects through complex security reviews.

The role combines technical security knowledge with governance, risk, and compliance and third-party risk management, working with IT, Security, Legal, Sales, and Customer teams to communicate controls and manage risk.