GRC Specialist

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a GRC Specialist based in Spain.

This is a high-impact Governance, Risk, and Compliance role within a fast-growing, fully remote environment focused on security and compliance automation. You’ll help expand and strengthen compliance offerings across frameworks such as ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, and others. The role combines hands-on compliance delivery, internal audits, content ownership, and customer support. You’ll work closely with Customer Success, Product, Engineering, and leadership to turn compliance requirements into practical solutions. With significant autonomy, you’ll have the opportunity to shape both customer-facing services and the compliance capabilities embedded within the platform. This is an ideal opportunity for an experienced GRC professional who enjoys ownership, variety, and measurable impact.

Accountabilities

• Build, maintain, and continuously improve compliance frameworks within the platform, including ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, and emerging frameworks.
• Lead internal audits for customers from initial kickoff through final reporting, ensuring audits remain on schedule and meet expected quality standards.
• Implement ISO 27001 and related security and compliance frameworks for customers, providing practical guidance throughout the certification journey.
• Own the quality and breadth of compliance content, including policies, automated checks, evidence templates, enablement playbooks, security awareness training, and related materials.
• Identify framework gaps and incorporate auditor feedback into compliance practices, customer delivery, and platform improvements.
• Partner with Product and Engineering teams to translate compliance requirements and identified gaps into structured product initiatives.
• Collaborate with Customer Success, Product, and leadership to align compliance priorities with customer needs and business objectives.
• Maintain and strengthen relationships with certification partners and support auditors in using the platform effectively during customer audits.
• Manage multiple audits and compliance initiatives simultaneously, prioritizing effectively and taking full ownership of delivery and outcomes.

Requirements:

• 3+ years of hands-on experience in information security, Governance, Risk, and Compliance, or a closely related field.
• Proven experience leading at least one successful ISO 27001 certification project as an implementer, auditor, or equivalent compliance professional within a startup or mid-market organization.
• Experience conducting at least two internal audits from planning through completion.
• Hands-on experience using a GRC platform or comparable compliance management technology.
• Strong knowledge of at least one compliance framework beyond ISO 27001, such as TISAX, SOC 2, GDPR, NIS 2, or a similar standard.
• Fluent English communication skills, with excellent written communication and the ability to produce clear, precise compliance content for auditors, executives, engineers, and customers.
• Strong project management and organizational skills, with the ability to turn ambiguous initiatives into concrete deliverables, prioritize effectively, and drive execution independently.
• A strong ownership mindset and the ability to operate effectively as an individual contributor without requiring constant direction.
• Bachelor’s degree in Computer Science, Software Engineering, a related technical discipline, or equivalent practical technical experience.
• Experience mentoring or coaching colleagues in compliance, audit, or GRC is a plus.
• Previous experience working in a startup environment is advantageous.
• PECB ISO 27001 Lead Auditor certification or an equivalent qualification is a bonus.

Benefits:

• 100% remote work with a virtual office environment.
• Competitive local salary aligned with or above relevant market rates.
• Generous equity package with an opportunity to share in the organization’s long-term success.
• Access to experienced mentors and a strong professional network.
• €1,000 annual personal development budget.
• Home office budget and access to coworking spaces.
• 26 days of annual holiday plus local public holidays.
• Comprehensive health insurance coverage.
• Annual company retreat focused on collaboration, connection, and new ideas.
• Company-wide events and opportunities to connect with colleagues across the organization.
• Modern technology and equipment, including a MacBook, monitors, and headphones.