> Markdown version of [/jobs/ext/1949551-hq-grc-senior-analyst](https://www.wearedevelopers.com/jobs/ext/1949551-hq-grc-senior-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# HQ - GRC Senior Analyst

- **Company:** Comunidad de Madrid
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Data Mapping, Information Technology Audit, Systems Development Life Cycle, Data Processing, Information Security Management System, Google Cloud, Cloud Platform System
- **Published:** August 6, 2026
- **Apply:** https://www.jobleads.com/es/job/e0099591dd5337648f12fe35a1fc219d9

## About the Role

* 8+ years of experience in GRC, Risk, Compliance, or IT Audit roles
 * 5+ years of strong hands-on experience with ISO 27001 and experience managing or supporting ISMS implementation.
 * 3+ years of practical experience with GDPR data mapping, reviewing systems from the tech side.
 * 5+ years of experience from a product tech company with global client reach in the US & EU (companies above 100 people).
 * Experience working with internal and external auditors
 * Very strong stakeholder management and communication skills across technical and non-technical teams.
 * Fluent English

## Description

We are looking for a GRC Senior Analyst to own and scale our Governance, Risk, and Compliance function within a fast-growing product company., * Own and lead the company's GRC implementation across ISO 27001 and GDPR.

 * Build and manage the Information Security Management System (ISMS) aligned with ISO 27001.
 * Ensure GDPR compliance across all data processing activities, including data mapping, data leaks, and encryptions.
 * Act as the primary point of contact for auditors and prepare the company for ISO audits.
 * Identify compliance gaps and drive remediation plans with technical and non-technical teams.
 * Develop governance policies, procedures, and risk management frameworks.
 * Partner closely with Engineering and Security teams to embed controls into systems and SDLC processes.
 * Monitor regulatory and compliance changes and translate them into actionable requirements.


## Related Videos

- [Beyond Gut Feelings: The Rise of Data-Driven HR](https://www.wearedevelopers.com/videos/1326-beyond-gut-feelings-the-rise-of-data-driven-hr)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization)
- [Why Your AI Agent Keeps Hallucinating Your Data: Building Deterministic Context Layers](https://www.wearedevelopers.com/videos/2055-why-your-ai-agent-keeps-hallucinating-your-data-building-deterministic-context-layers)

## Related Articles

- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Top HR Tech Conferences in 2024](https://www.wearedevelopers.com/magazine/303-top-hr-tech-conferences-in-2024)