> Markdown version of [/jobs/ext/1980363-grc-manager](https://www.wearedevelopers.com/jobs/ext/1980363-grc-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Manager

- **Company:** Adevinta
- **Location:** Spain
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Software as a Service, Cloud Engineering, Phishing, Information Security Management System, RSA Archer Platform
- **Published:** August 8, 2026
- **Apply:** https://www.jobleads.com/es/job/ef8389a6b3bf5f3ddffdf9994d6e60475

## About the Role

* Experience leading GRC or Information Security Governance in a technology company
 * Strong understanding of ISO 27001, ENS, NIST or similar frameworks
 * Experience managing external audits
 * Experience with Vendor Risk Management
 * Excellent communication skills with technical and non-technical stakeholders
 * Pragmatic mindset focused on reducing business risk
 * Ability to work autonomously and drive initiatives end-to-end, * Experience in SaaS, cloud-native or digital marketplace environments
 * Experience with GRC platforms
 * Security certifications (CISM, CRISC, ISO Lead Auditor...)

## Description

You will own the Governance, Risk & Compliance function across Adevinta Information Services and support our marketplaces in maintaining a strong security posture., * Own the Information Security Management System (ISMS)

 * Lead ISO 27001, ENS and other security certifications and audits
 * Coordinate cybersecurity assessments from internal stakeholders, EQT and external auditors
 * Drive Third-Party Risk Management across suppliers and strategic partners
 * Define and maintain security policies, standards and governance processes
 * Lead security awareness and phishing programmes across the company
 * Track security risks and remediation plans with business owners
 * Build executive dashboards and security KPIs for senior leadership
 * Coordinate Business Continuity and security governance activities
 * Partner with Legal, Privacy, Procurement, Engineering and Product teams to embed security into business processes
 * Help scale governance through automation and AI where possible


## Related Videos

- [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [We adopted DevOps and are Cloud-native, Now What?](https://www.wearedevelopers.com/videos/485-we-adopted-devops-and-are-cloud-native-now-what)
- [DevOps for AI: running LLMs in production with Kubernetes and KubeFlow](https://www.wearedevelopers.com/videos/1222-devops-for-ai-running-llms-in-production-with-kubernetes-and-kubeflow)
- [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)