> Markdown version of [/jobs/ext/2765344-grc-specialist](https://www.wearedevelopers.com/jobs/ext/2765344-grc-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Specialist - **Company:** Qalea - **Location:** vaucluse, Spain (Remote available) - **Salary:** €30,000.0 - €40,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software as a Service, Security Software, Security Information and Event Management, RSA Archer Platform, Vulnerability Analysis - **Published:** September 6, 2026 - **Apply:** https://eurojobs.com/jobs/26339778/apply ## About the Role * 2+ years in client-facing roles combining technical depth and business communication (Customer Success, Compliance, Security Consulting, or similar). * Solid familiarity with security and compliance frameworks (ISO 27001, SOC 2, ENS, NIS2, DORA…). * Hands-on experience with cybersecurity tools - EDR/SIEM, vulnerability scanners, awareness platforms, password managers, etc. * A proactive, curious, hands-on mindset - you thrive in ambiguity and bring structure where there is none. * Excellent communication in Spanish and English - you make complex topics simple and people feel genuinely heard. Cultural Fit * Solution-Oriented: You bring solutions, not problems. You're proactive in overcoming blockers. * Accountability: You create clarity rather than expecting others to create it for you. You understand that responsibility is the ability to respond, and accountability is the ownership of the (quantifiable) result. * Ownership Mindset: You're autonomous, decisive, and lead with confidence. * Collaboration: You work seamlessly across teams, building trust and moving things forward together. * Communication: Native-level fluency in Spanish and professional fluency in English is mandatory. Nice-to-Haves * Experience in early-stage startups or fast-paced SaaS environments. * Exposure to GRC platforms or compliance automation tools. * Experience guiding clients through actual audits or certification processes - you've been in the room. * Comfortable using AI tools to amplify your work and move faster. You see AI as a partner, not a threat. * A good grasp of how security, risk, and compliance intersect in real business contextsbeyond frameworks, into reality. ## Description * Act as the main point of contact for customers guiding them through onboarding, configuration, and ongoing platform adoption. * Help clients design and implement cybersecurity and compliance programs aligned with standards like ISO 27001, SOC 2, ENS, NIS2, and DORA. * Configure and optimize Qalea's cybersecurity tools (EDR, SIEM, vulnerability scanning, awareness training) getting your hands dirty when it counts. * Support clients in preparing for audits and certification by automating documentation and evidence collection through Qalea turning a painful process into a smooth one. * Track customer progress toward security and compliance milestones and proactively keep them on course. * Act as a trusted advisor resolving issues, clarifying requirements, and ensuring clients get tangible, measurable results. * Collaborate closely with product and engineering teams to bring real-world customer feedback into the roadmap - your voice shapes what we build next. * Build long-term relationships with key stakeholders to ensure customer satisfaction, retention, and growth., * Stage 2: Technical & Advisory Deep Dive (45 mins): we get into your real work - compliance frameworks, customer programs, tooling, and why Qalea * Stage 3: Practical Exercise (60-90 mins): a hands-on scenario (a customer's security or compliance challenge) so we can see how you approach problems and how you think * Stage 4: Final Cultural Fit (30 mins): a final conversation to make sure we're fully aligned on both sides before making it official * Timeline: 2-3 weeks from first call to offer Ready to shape the future of cybersecurity? https://navy-flare-a24.notion.site/bae2bcea0d7183449491810e18eaf3d8 [INS: :INS] ## Related Videos - [Your Enterprise RAG Has No Legal Basis](https://www.wearedevelopers.com/videos/100344-your-enterprise-rag-has-no-legal-basis) - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/videos/1594-beyond-the-hype-building-trustworthy-and-reliable-llm-applications-with-guardrails) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)