> Markdown version of [/jobs/ext/1304703-security-engineer-grc](https://www.wearedevelopers.com/jobs/ext/1304703-security-engineer-grc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer - GRC

- **Company:** Back Market
- **Location:** Bilbao, Spain
- **Salary:** €62,000.0 - €82,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, PCI Data Security Standards
- **Published:** July 17, 2026
- **Apply:** https://www.adzuna.es/contact-us.html

## About the Role

+ You are a talented engineer with at least 5 years experience of working on security or compliance programs, leading cybersecurity projects and ensuring the proper implementation of security best practices
 + You believe in the importance of a risk-based approach to define and maintain security objectives, policies, procedures and action plans necessary for succeeding in your mission
 + You care about explaining the rationales for the company's security choices, to ensure that colleagues understand and adopt them
 + For you, defining a security requirement without proper analysis or foundation is a non-sense
 + You master some best practices and standards such as the ISO/IEC 27000 series, including ISO 27001, 27005 or EBIOS RM
 + You are curious, structured and enjoy exploring new methods and technologies. You are transparent in your communication and are able to find solutions with your team and your stakeholders when you don't have an answer
 + You like to share knowledge and make your colleagues aware of good cybersecurity practices, by supporting your proposals with concrete examples and demonstrations
 + In-depth knowledge of PCI-DSS and GDPR would be appreciated
 + Great English verbal and written communication skills

## Description

As Senior Security Engineer GRC you will join the Governance, Risks and Compliance (GRC) Squad within the CyberSecurity Tribe.
Our GRC squad is responsible for identifying and mitigating cyber and privacy risks, ensuring compliance with laws and standards (specifically ISO 27001, PCI-DSS, GDPR, CCPA, AI Act, NIS2) that guide Back Market's operations and decision-making processes.
\n
Being a domain expert and evangelist of cybersecurity and privacy best practices you will :

 + Drive multiple cybersecurity and privacy initiatives to achieve our compliance and security goals by collaborating with Engineering, Legal, Product, and Business teamsInfluence decision-making on new third-party partnerships, perform risk assessments on strategic projects or features, and offer expert guidance on security and privacy to educate and empower your colleagues and stakeholders.
 + Provide support within the CyberSecurity tribe on technical security projects making sure we comply with our internal security and privacy policies.
 + Contribute actively to the development and execution of our cybersecurity and privacy awareness strategy.


## Related Videos

- [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)