> Markdown version of [/jobs/ext/3016653-grc-specialist](https://www.wearedevelopers.com/jobs/ext/3016653-grc-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Specialist - **Company:** Número De - **Location:** Madrid, Spain (Remote available) - **Salary:** €35,000.0 - €40,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Software Engineering, Tisax, Information Technology - **Published:** September 20, 2026 - **Apply:** https://www.adzuna.es/contact-us.html ## About the Role + 3+ years of hands-on experience in information security, Governance, Risk, and Compliance, or a closely related field. + Proven experience leading at least one successful ISO 27001 certification project as an implementer, auditor, or equivalent compliance professional within a startup or mid-market organization. + Experience conducting at least two internal audits from planning through completion. + Hands-on experience using a GRC platform or comparable compliance management technology. + Strong knowledge of at least one compliance framework beyond ISO 27001, such as TISAX, SOC 2, GDPR, NIS 2, or a similar standard. + Fluent English communication skills, with excellent written communication and the ability to produce clear, precise compliance content for auditors, executives, engineers, and customers. + Strong project management and organizational skills, with the ability to turn ambiguous initiatives into concrete deliverables, prioritize effectively, and drive execution independently. + A strong ownership mindset and the ability to operate effectively as an individual contributor without requiring constant direction. + Bachelor's degree in Computer Science, Software Engineering, a related technical discipline, or equivalent practical technical experience. + Experience mentoring or coaching colleagues in compliance, audit, or GRC is a plus. + Previous experience working in a startup environment is advantageous. + PECB ISO 27001 Lead Auditor certification or an equivalent qualification is a bonus. ## Description This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a GRC Specialist based in Spain. This is a high-impact Governance, Risk, and Compliance role within a fast-growing, fully remote environment focused on security and compliance automation. You'll help expand and strengthen compliance offerings across frameworks such as ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, and others. The role combines hands-on compliance delivery, internal audits, content ownership, and customer support. You'll work closely with Customer Success, Product, Engineering, and leadership to turn compliance requirements into practical solutions. With significant autonomy, you'll have the opportunity to shape both customer-facing services and the compliance capabilities embedded within the platform. This is an ideal opportunity for an experienced GRC professional who enjoys ownership, variety, and measurable impact. Accountabilities + Build, maintain, and continuously improve compliance frameworks within the platform, including ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, and emerging frameworks. + Lead internal audits for customers from initial kickoff through final reporting, ensuring audits remain on schedule and meet expected quality standards. + Implement ISO 27001 and related security and compliance frameworks for customers, providing practical guidance throughout the certification journey. + Own the quality and breadth of compliance content, including policies, automated checks, evidence templates, enablement playbooks, security awareness training, and related materials. + Identify framework gaps and incorporate auditor feedback into compliance practices, customer delivery, and platform improvements. + Partner with Product and Engineering teams to translate compliance requirements and identified gaps into structured product initiatives. + Collaborate with Customer Success, Product, and leadership to align compliance priorities with customer needs and business objectives. + Maintain and strengthen relationships with certification partners and support auditors in using the platform effectively during customer audits. + Manage multiple audits and compliance initiatives simultaneously, prioritizing effectively and taking full ownership of delivery and outcomes. ## Related Videos - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [The Avengers Initiative (Practical Ethics for Software Engineers)](https://www.wearedevelopers.com/videos/2070-the-avengers-initiative-practical-ethics-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)