> Markdown version of [/jobs/ext/2973894-grc-specialist](https://www.wearedevelopers.com/jobs/ext/2973894-grc-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Grc Specialist

- **Company:** Qalea
- **Location:** Cantabria, Spain
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Security Software, Security Information and Event Management, RSA Archer Platform, Vulnerability Analysis
- **Published:** September 18, 2026
- **Apply:** https://www.buscojobs.com.es/grc-specialist-en-ribamontan-al-mar-ID-371405140

## About the Role

Must-Haves 2+ years in client-facing roles combining technical depth and business communication (Customer Success, Compliance, Security Consulting, or similar).
Solid familiarity with security and compliance frameworks (ISO *****, SOC 2, ENS, NIS2, DORA...).
Hands-on experience with cybersecurity tools - EDR/SIEM, vulnerability scanners, awareness platforms, password managers, etc.
A proactive, curious, hands-on mindset - you thrive in ambiguity and bring structure where there is none.
Excellent communication in Spanish and English - you make complex topics simple and people feel genuinely heard.
Cultural Fit Solution-Oriented: You bring solutions, not problems.
You're proactive in overcoming blockers.
Accountability: You create clarity rather than expecting others to create it for you.
You understand that responsibility is the ability to respond, and accountability is the ownership of the (quantifiable) result.
Ownership Mindset: You're autonomous, decisive, and lead with confidence.
Collaboration: You work seamlessly across teams, building trust and moving things forward together.
Communication: Native-level fluency in Spanish and professional fluency in English is mandatory.
Nice-to-Haves Experience in early-stage startups or fast-paced Saa S environments.
Exposure to GRC platforms or compliance automation tools.
Experience guiding clients through actual audits or certification processes - you've been in the room.
Comfortable using AI tools to amplify your work and move faster.
You see AI as a partner, not a threat.
A good grasp of how security, risk, and compliance intersect in real business contextsbeyond frameworks, into reality.

## Description

Security & Compliance Specialist About Qalea We are Qalea, a fast-growing, early-stage cybersecurity startup on a mission to make digital security intuitive and accessible for every business.We've built a platform that puts simplicity, usability, and real impact at the core of cybersecurity.We've raised 1.5 M€ and are backed by top-tier investors, from cybersecurity unicorn founders to leading VC firms.We're also proud to be part of the Google for Startups AI-Cybersecurity program, working alongside some of the brightest minds in product and security.We move fast, stay curious, and care deeply about what we're building.What matters to us is making an impact and building together, while enjoying the ride.The Mission We're looking for a Security & Compliance Specialist to become the trusted security partner for our customers a role that sits at the intersection of v CISO and Customer Success.You won't just "manage accounts."You'll guide companies through real security and compliance challenges, helping them build strong programs aligned with standards like ISO *****, SOC 2, ENS, NIS2, and DORA and achieve meaningful milestones.You'll combine technical expertise with strong relationship skills to drive onboarding, adoption, and long-term impact.This is a role with real ownership and visible impact from day one.You'll work shoulder-to-shoulder with a strong team, making security feel achievable and measurable for the customers who rely on us every day.What You'll Do Act as the main point of contact for customers guiding them through onboarding, configuration, and ongoing platform adoption.Help clients design and implement cybersecurity and compliance programs aligned with standards like ISO *****, SOC 2, ENS, NIS2, and DORA.Configure and optimize Qalea's cybersecurity tools (EDR, SIEM, vulnerability scanning, awareness training) getting your hands dirty when it counts.Support clients in preparing for audits and certification by automating documentation and evidence collection through Qalea turning a painful process into a smooth one.Track customer progress toward security and compliance milestones and proactively keep them on course.Act as a trusted advisor resolving issues, clarifying requirements, and ensuring clients get tangible, measurable results.Collaborate closely with product and engineering teams to bring real-world customer feedback into the roadmap - your voice shapes what we build next.Build long-term relationships with key stakeholders to ensure customer satisfaction, retention, and growth.Must-Haves 2+ years in client-facing roles combining technical depth and business communication (Customer Success, Compliance, Security Consulting, or similar).Solid familiarity with security and compliance frameworks (ISO *****, SOC 2, ENS, NIS2, DORA...).Hands-on experience with cybersecurity tools - EDR/SIEM, vulnerability scanners, awareness platforms, password managers, etc.A proactive, curious, hands-on mindset - you thrive in ambiguity and bring structure where there is none.Excellent communication in Spanish and English - you make complex topics simple and people feel genuinely heard.Cultural Fit Solution-Oriented: You bring solutions, not problems.You're proactive in overcoming blockers.Accountability: You create clarity rather than expecting others to create it for you.You understand that responsibility is the ability to respond, and accountability is the ownership of the (quantifiable) result.Ownership Mindset: You're autonomous, decisive, and lead with confidence.Collaboration: You work seamlessly across teams, building trust and moving things forward together.Communication: Native-level fluency in Spanish and professional fluency in English is mandatory.Nice-to-Haves Experience in early-stage startups or fast-paced Saa S environments.Exposure to GRC platforms or compliance automation tools.Experience guiding clients through actual audits or certification processes - you've been in the room.Comfortable using AI tools to amplify your work and move faster.You see AI as a partner, not a threat.A good grasp of how security, risk, and compliance intersect in real business contextsbeyond frameworks, into reality.Our Benefits Salary Range: Between ***** K


## Related Videos

- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [How to Stop Your Agents From Going Rogue - Arnav Gupta](https://www.wearedevelopers.com/videos/2152-how-to-stop-your-agents-from-going-rogue-arnav-gupta)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Hack Me If You Can: Designing Unbreakable LLM Guardrails](https://www.wearedevelopers.com/videos/100209-hack-me-if-you-can-designing-unbreakable-llm-guardrails)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)