💼 Full-Time Position

HQ - GRC Lead

🏢
Confidential
📍 Madrid, Community of Madrid, Spain
📍
Location
Madrid, Spain
📅
Posted
May 29, 2026
⏰
Type
Full-Time
🎯

Full-Time Opportunity: This is a permanent, full-time position with a competitive package and real career growth potential.

Job Description

We are looking for a GRC Lead to own and scale our Governance, Risk, and Compliance function within a fast-growing product company. This is a key role responsible for ensuring compliance with SOX, ISO 27001, and GDPR, while enabling the business to move fast in a secure and controlled way.


You will act as the main driver of our compliance strategy, working cross-functionally with Engineering, Security, Legal, Finance, and Product teams.


What you will do

  • Own and lead the company’s GRC strategy across SOX, ISO 27001, and GDPR

  • Design, implement, and maintain SOX control frameworks, including documentation, testing, and audit readiness

  • Build and manage the Information Security Management System (ISMS) aligned with ISO 27001

  • Ensure GDPR compliance across all data processing activities, including data mapping, DPIAs, and privacy controls

  • Lead internal and external audits, acting as the primary point ...