> Markdown version of [/jobs/ext/2181171-senior-grc-consultant](https://www.wearedevelopers.com/jobs/ext/2181171-senior-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Grc Consultant - **Company:** Hack In Hire - **Location:** Coslada, Spain - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Computer Engineering, Information Security Management, Smartsuite, Information Security Management System - **Published:** August 22, 2026 - **Apply:** https://www.buscojobs.com.es/senior-grc-consultant-en-coslada-ID-368148062 ## About the Role Education Requirements * Bachelor's degree in Computer Engineering, Telecommunications, Mathematics, or equivalent. * ISACA CISA and/or ISO ***** Lead Auditor certifications. Experience requirements * Minimum of 3 years of demonstrable experience in cybersecurity consulting within GRC. * Participation, as a lead consultant, in several ISO ***** and ENS implementation projects. * Practical experience in projects adapting to the National Security Scheme (ENS) (medium and high categories) and ISO *****. Technical and regulatory knowledge requirements * Solid command of ISO/IEC *****:****, ISO/IEC *****:****, and ISO/IEC *****. * In-depth knowledge of the National Security Scheme and the CCN-STIC 800 series of guidelines. * Knowledge of NIS2, DORA, GDPR/LOPDGDD, ISO *****, and the European cybersecurity regulatory ecosystem. * Familiarity with ISO ***** and best practices in Business Continuity. Other * Native or bilingual Spanish speaker. * Minimum B2 level English (fluent technical reading and working in meetings). * Availability for occasional travel to clients within Spain. The following will be considered an asset: * Professional certifications: CISM, CRISC, CISSP, Lead Auditor / Lead Implementer ISO *****, ISO *****, etc. * Master's degree in Information Security, ICT Auditing, or equivalent. * Experience with ISO/IEC *****, EU AI Act, and/or Cyber Resilience Regulation (CRA). * Previous experience in consulting for public administrations as well as for technology providers to public administrations. * Experience with GRC tools. Competencies and soft skills * Ability to lead projects and multidisciplinary teams. * Excellent oral and written communication skills, with the ability to write high-quality technical documents. * Customer-focused and detail-oriented. * Autonomy, proactivity, and the ability to organize one's own work. * Analytical thinking and sound normative judgment. ## Description We're hiring a Senior GRC Consultant Lea atentamente toda la información sobre esta oportunidad y luego utilice el botón de solicitud de abajo para enviar su CV y su candidatura.Location: Madrid / Castilla y León - Hybrid Salary: *****k€ We are looking to hire a Senior GRC Consultant with a strong track record in projects involving the implementation, adaptation, and auditing of information security management frameworks, business continuity, and regulatory compliance.The selected candidate will lead client projects from start to finish, acting as the client's technical lead, with a direct reporting line to the GRC Manager.What you'll do * Lead the implementation and maintenance of ISMS projects in accordance with ISO/IEC *****:**** and ISO/IEC ***** controls.Similarly, lead projects related to ISO ***** and/or GDPR.* Manage adaptation processes to the National Security Framework (Royal Decree ******** and CCN-STIC 800, specifically sections 803, 804, 808, and 817), including the statement of applicability, risk analysis, and adaptation plan.* Design and implement Business Continuity Management Systems (BCMS) according to ISO *****, including BIA, continuity risk analysis, continuity and recovery plans, and testing.* Conduct risk analyses and assessments using recognized methodologies for ENS and ISO *****.* Assist clients in internal audit and certification processes with accredited bodies, as well as in compliance audits with ENS, ISO *****, etc.* Support projects adapting to NIS2, DORA, CIS, ENS, and ISO/IEC ***** according to client needs.* Develop high-quality policies, procedures, regulations, and technical reports, adhering to rigorous regulatory criteria.Attend coordination meetings with the client's CIO/CISO.* Serve as the primary point of contact for CISOs, compliance officers, and client management.Education Requirements * Bachelor's degree in Computer Engineering, Telecommunications, Mathematics, or equivalent.* ISACA CISA and/or ISO ***** Lead Auditor certifications.Experience requirements * Minimum of 3 years of demonstrable experience in cybersecurity consulting within GRC.* Participation, as a lead consultant, in several ISO ***** and ENS implementation projects.* Practical experience in projects adapting to the National Security Scheme (ENS) (medium and high categories) and ISO *****.Technical and regulatory knowledge requirements * Solid command of ISO/IEC *****:****, ISO/IEC *****:****, and ISO/IEC *****.* In-depth knowledge of the National Security Scheme and the CCN-STIC 800 series of guidelines.* Knowledge of NIS2, DORA, GDPR/LOPDGDD, ISO *****, and the European cybersecurity regulatory ecosystem.* Familiarity with ISO ***** and best practices in Business Continuity.Other * Native or bilingual Spanish speaker.* Minimum B2 level English (fluent technical reading and working in meetings).* Availability for occasional travel to clients within Spain.The following will be considered an asset: * Professional certifications: CISM, CRISC, CISSP, Lead Auditor / Lead Implementer ISO *****, ISO *****, etc.* Master's degree in Information Security, ICT Auditing, or equivalent.* Experience with ISO/IEC *****, EU AI Act, and/or Cyber Resilience Regulation (CRA).* Previous experience in consulting for public administrations as well as for technology providers to public administrations.* Experience with GRC tools.Competencies and soft skills * Ability to lead projects and multidisciplinary teams.* Excellent oral and written communication skills, with the ability to write high-quality technical documents.* Customer-focused and detail-oriented.* Autonomy, proactivity, and the ability to organize one's own work.* Analytical thinking and sound normative judgment.What we offer * Join a cybersecurity consulting firm in its established and growing GRC unit.* High-value projects with leading clients in regulated sectors.* Hybrid work model (office in Madrid).* *****k€ compensation commensurate with experience, with performance-based bonuses.* Career development plan and ongoing training, including professional certifications.* Top-tier technical team and participation in forums Hiring process Fully online: A filter from Hack In Hire.An interview with client's HR.A technical interview with the team.xiphteb Interested?Apply via LinkedIn or submit your CV via ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Swapping a Data Warehouse at Runtime: Zero-Downtime Migration Without Changing a Single Client](https://www.wearedevelopers.com/videos/100311-swapping-a-data-warehouse-at-runtime-zero-downtime-migration-without-changing-a-single-client) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)