> Markdown version of [/jobs/ext/1910037-about-upsun-formerly-platform-sh](https://www.wearedevelopers.com/jobs/ext/1910037-about-upsun-formerly-platform-sh). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # About Upsun (formerly Platform.sh) - **Company:** Upsun (via Remote Woman) - **Location:** Spain (Remote available) - **Contract:** Permanent contract - **Skills:** LTE (Telecommunication), Issue Tracking Systems, PCI Data Security Standards - **Published:** August 4, 2026 - **Apply:** https://es.indeed.com/viewjob?jk=3b07ac0a3431fcda ## About the Role * Risk & Compliance Experience: 5+ years of experience in risk, audit, compliance, governance, security assurance, or a closely related area. * Audit Experience: Hands-on experience supporting audits, evidence collection, control testing or monitoring, and remediation tracking. * Framework Knowledge: Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, HIPAA, ISO 42001, GDPR, PIPEDA or similar standards. * Communication Skills: Ability to explain requirements clearly to both technical and non-technical audiences. * Organization & Prioritization: Strong organization and prioritization skills, especially when managing several deadlines at once. * Judgment & Problem-Solving: Good judgement, attention to detail, and a practical approach to solving problems. * Remote & Cross-Functional Collaboration: Comfort working in a remote, global environment with cross-functional teams across varied timezones., * Experience with governance, risk, and compliance tools or audit management platforms * Experience supporting customer assurance, security questionnaires, or trust documentation * Working knowledge of Third-party risk management (TPRM) * Relevant certifications such as CISA, CRISC, CISSP, CC, CISM, CGEIT, ISO 27001, ISO 42001 or similar ## Description As a Senior Risk & Audit Specialist at Upsun, you help keep our security, risk, audit, and compliance work moving with clarity, care, and consistency. Reporting to the Director, Risk & Audit, you'll work closely with teams across Security, Engineering, IT, Legal, Product, and Sales to keep key audits and certifications (including ISO 27001, SOC 2, PCI DSS, and HIPAA) on track and our global business audit-ready. You're practical, organized, and curious; someone who enjoys making complex requirements easier to understand and thrives when balancing planned work with time-sensitive audit and customer requests. You partner with control owners across the business to coordinate evidence, monitor risk, and turn complex requirements into guidance that's easy to act on. Beyond keeping audits on track, you contribute to the long-term evolution of our risk and compliance program by supporting readiness for new and expanding assurance needs, simplifying repeatable processes, and improving evidence quality. Your attention to detail, cross-functional mindset, and clear communication help leadership stay informed and give our customers confidence in our security posture., * Audit & Certification Support: Support active and upcoming audits, including ISO 27001, SOC 2, PCI DSS, HIPAA, and other relevant assurance work by coordinating evidence collection, reviewing evidence quality, scheduling walkthroughs, and following up with control owners. * Risk & Control Management: Support risk assessments, risk register updates, control monitoring, issue tracking, and risk treatment follow-up by working with teams to identify control gaps, agree on practical actions, and track remediation through to completion. * Third-Party Risk Management: Conduct third-party risk management reviews to support a comprehensive view of organizational risk. * Compliance Program Support: Support ongoing compliance activities across established frameworks and emerging readiness work (including Australia ISM/IRAP/HCF, NIS2, and ISO 42001/AIM) while maintaining policies, procedures, control narratives and supporting documentation. * Customer & Stakeholder Support: Respond to customer and prospect security or compliance questions in partnership with Sales, Legal, Security, and Product, and support updates to the Trust Center and other trust documentation. * Reporting & Continuous Improvement: Prepare clear updates on audit status, risks, blockers, metrics, and remediation progress for leadership and look for opportunities to simplify repeatable processes and reduce audit friction for control owners. * Tooling & Process Management: Use risk, audit, and compliance tools to keep work organized, traceable, and easy to report on. * Internal Audit Support: Support internal audit and review activities as needed. ## Related Videos - [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure) - [How Visionary Leaders Drive Transformation](https://www.wearedevelopers.com/videos/1701-how-visionary-leaders-drive-transformation) - [Recruiting in 2025: Will AI Help or Take Over?](https://www.wearedevelopers.com/videos/1301-recruiting-in-2025-will-ai-help-or-take-over) - [Migrating half a million users to a new payment service provider](https://www.wearedevelopers.com/videos/730-migrating-half-a-million-users-to-a-new-payment-service-provider) - [Fighting Fraud with an AI Grandma - Ben Hopkins and Morten Legarth from faith @ VCCP](https://www.wearedevelopers.com/videos/1316-fighting-fraud-with-an-ai-grandma-ben-hopkins-and-morten-legarth-from-faith-vccp) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Mastering Remote Work: Tips for Developers](https://www.wearedevelopers.com/magazine/558-mastering-remote-work-tips-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)