{"id":1088240,"url":"https://alion.io/job/delivery-hero-security-grc-engineer","title":"Security GRC Engineer","company":{"id":3502,"name":"Delivery Hero","domain":"deliveryhero.com","url":"https://alion.io/company/delivery-hero","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":97,"ghost_share":0,"stale_share":0.99,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Barcelona, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":45000,"max_usd":104000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"EU AI Act","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"ServiceNow","optional":false},{"name":"NIST AI RMF","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-09-21T09:04:43Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-08T15:01:51Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"Glovo is part of the Delivery Hero Group, the world’s pioneering local delivery platform, our mission is to deliver an amazing experience-fast, easy, and to your door. We operate in around 65 countries worldwide. Headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index.\n Glovo is seeking a proactive Security GRC Engineer to help strengthen our global security posture and navigate a rapidly evolving regulatory environment. In this multifaceted role, you will support compliance frameworks (PCI DSS, ISO 27001, NIS2), internal and external audits, drive risk assessment and remediation, and pioneer security awareness programs within our organization. Acting as a strategic bridge between technical engineering, legal, and business stakeholders, you will translate complex legal and regulatory demands into robust, actionable security controls. The ideal candidate brings deep cybersecurity risk expertise, hands-on experience with GRC tools, and the collaborative mindset needed to foster a security-first culture across Glovo.\nBe a part of a team where you will:\nDevelop, implement, and maintain security policies and procedures in line with relevant compliance frameworks (e.g., ISO 27001, NIST, PCI DSS, GDPR, NIS2, EU AI Act).\n\nDevelop, execute and deliver security awareness programs to educate employees on best practices and compliance requirements.\n\nConduct security assessment risks, recommending and implementing mitigation strategies, maintaining a risk register and monitoring the status of remediation plans.\n\nCoordinate and respond to customer security inquiries and due diligence questionnaires (e.g., SIG, CAIQ). Review and provide input on contract modifications related to security, data protection, and privacy.\n\nPropose, develop and implement processes and tools for continuous monitoring of security monitoring to ensure ongoing adherence to policies.\n\nAssist with the end-to-end security certification and re-certification process (such as PCI DSS, ISO 27001, NIS2, among others).\n\nAssist with internal assessments to identify gaps, weaknesses, or non-compliance issues within our security controls.\n\nSupport external and internal audits by preparing documentation and coordinating with auditors, follow ups and findings remediation.\n\nServe as a key liaison between technical teams, legal, internal audit, and business units to ensure a unified approach to security and compliance\n\n You have:\nBA/BS in Computer Science, Information Systems, or similar field.\n\nProfessional security certifications (CISSP, CISM, CISA, ISO 27001 Lead Implementer or equivalent).\n\nMinimum 5 years of experience in the field or in a related area.\n\nSolid understanding and previous experience of security control frameworks (NIST, PCI DSS, GDRP, ISO 27001, NIS2)\n\nHands-on experience with GRC platforms (e.g. RSA Archer, SAP GRC, StandardFusion, ServiceNow, OneTrust, etc).\n\nStrong ability to manage and report on multiple projects, prioritizing efforts, managing time effectively, and requiring minimal direction in the execution.\n\nProven problem solving, analytical and investigative skills combined with the ability to develop creative solutions and navigate through ambiguity in a fast-paced, agile environment.\n\nProven team player, collaborating well with others to tackle problems in a team-focused dynamic.\n\nExcellent written and communications skills, as well as strong interpersonal and relationship building skills.\n\nExperience with compliance in cloud environments (AWS, Azure, GCP) and knowledge of frameworks like the Cloud Controls Matrix (CCM).\n\nExperience in risk quantification methodologies (e.g., FAIR) to assess financial and operational impact of security risks.\n\nStrong background in designing and delivering effective security awareness programs to foster a security-first culture.\n\nNice-to-haves:\nDevelopment skills to automate integrations or processes (e.g. python).\n\nExperience with developing, documenting, and testing Business Continuity Plans (BCP) and Disaster Recovery (DR) plans.\n\nWorking knowledge of the EU AI Act, including its risk-based approach and requirements for high-risk and general-purpose AI models. Familiarity with AI security threats and relevant frameworks (NIST AI RMF, MITRE ATLAS).\n\n At Glovo, your success is defined by both results and behaviors. We hire for excellence in craft and for the Leadership Principles that shape how we think, decide, and collaborate. What you achieve matters and how you achieve it defines us. Together, they move the business forward and deliver great experiences. Learn more about our Leadership Principleshere .\nHere at Glovo, we thrive on diversity, we believe it enhances our teams, products, and culture. We know that the best ideas come from a mashup of brilliant diverse minds. This is why we are committed to providing equal opportunities to talent from all backgrounds - all genders, racial/diverse backgrounds, abilities, ages, sexual orientations and all other unique characteristics that make you YOU. We will encourage you to bring your authentic self to work, fostering an inclusive environment where everyone feels heard.\nFeel free to note your pronouns in your application (e.g., she/her/hers, he/him/his, they/them/theirs, etc).\nSo, ready to take the wheel and make this the ride of your life?\nDelve into our culture by taking a peek at our Instagram and check out our LinkedIn and website!","description_format":"text","description_chars":5488,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Delivery","Marketplaces","Online Groceries"],"lifecycle":[{"event":"open","at":"2026-09-21T11:15:13Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.504,"p_room":0.36,"age_days":47,"expected_fill_days":27,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/delivery-hero-security-grc-engineer","json_url":"https://alion.io/job/delivery-hero-security-grc-engineer.json","meta":{"generated_at":"2026-11-08T17:22:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36513,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3502},"rest":"https://alion.io/mcp/rest/get_company?id=3502"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdelivery-hero-security-grc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdelivery-hero-security-grc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdelivery-hero-security-grc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/delivery-hero-security-grc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdelivery-hero-security-grc-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1088240}},{"tool":"search_jobs","arguments":{"company":"deliveryhero.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1088240},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}