> Markdown version of [/jobs/ext/3043892-grc-consultant-madrid](https://www.wearedevelopers.com/jobs/ext/3043892-grc-consultant-madrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC CONSULTANT MADRID

- **Company:** Thales Spain
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Cyber Security, PCI Data Security Standards
- **Published:** September 24, 2026
- **Apply:** https://www.adzuna.es/contact-us.html

## About the Role

+ Senior consultant with at least 5 years of experience
 + Ability to analyse and synthesise information
 + Strong interpersonal and communication skills
 + Proactivity and autonomy
 + Critical thinking skills Teamwork
 + Commitment to continuous improvement
 + A higher technical degree (in engineering or a similar subject), preferably in IT or telecommunications.
 + Knowledge of cybersecurity in general.
 + Experience of Governance, Risk Management and Compliance (GRC) in relation to frameworks such as PCI DSS, NIST CSF, ISO 27001, ENS, ISO 22301, NIS2 and DORA.
 + Knowledge of technological cybersecurity, and experience in designing and implementing projects for deploying cybersecurity technologies. At least three years' experience in cybersecurity.
 + In hybrid mode.

## Description

Thales Spain requires a specialised support service for regulatory compliance, risk management, and cybersecurity governance. Act as a consultant, developing governance, risk management and regulatory compliance advisory projects, potentially leading their development, while expanding your knowledge of other applicable regulatory frameworks (NIST CSF, ISO 27001, ENS, ISO 22301, GDPR, PCI DSS, etc.) and evolving towards a senior role.
Job Responsabilities:

 + Defining and validating assessment and audit scopes.
 + Reviewing technical documentation, policies, regulations and procedures. Interviewing responsible persons for security measures and controls.
 + Reviewing and validating evidence for assessments and audits.
 + Consulting and advising on compliance with information security standards and regulations.
 + Developing reports and deliverables.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows)

## Related Articles

- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)