> Markdown version of [/jobs/ext/319253-consultor-a-grc](https://www.wearedevelopers.com/jobs/ext/319253-consultor-a-grc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Consultor/a GRC

- **Company:** Grupo SIA
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Cyber Security, PCI Data Security Standards, Information Technology
- **Published:** June 15, 2026
- **Apply:** https://www.tecnoempleo.com/consultor-grc-madrid/iso-27001-iso-22301-control-riesgos-pilar-seguridad-l/rf-2ef912f302d68357354f

## About the Role

*Experiencia y competencias requeridas

 - Valoramos perfiles desde escasa experiencia a perfiles con amplia experiencia.

*Certificaciones y formación

 - Formación en Derecho, Telecomunicaciones, Informática o similar.

 - Muy valorable : Certificación CISA o Lead Auditor 27001, otras certificaciones de Seguridad: CISM, CISSP, CGEIT, CRISC, C´CISO, PCI-DSS

-Inglés nivel alto.

Lugar de trabajo: Posibilidad de teletrabajo 100%., Idiomas: Inglés (Alto)

Formación Mínima: FP2/Grado Superior

Nivel Profesional: Empleado

## Description

Como Consultor/a de GRC, dentro del área de Cyber Risk and Compliance, tus principales responsabilidades serán :

 * Adecuación Regulatoria (EBA ICT Risk, DORA, LPIC, PCI-DSS, SWIFT, etc.)

*Assesment de seguridad y Alineamiento a las mejores prácticas (NIST CSF, ISO27, EBA, EIOPA, etc.).

*Análisis de Riesgos y Planes de Acción.

*Elaboración de Marcos de Control.

*Desarrollo de Politicas, Normas y Procedimientos de seguridad.

*Auditorías de cumplimiento.

*Soporte a auditorias.

*Certificación de controles.

*Seguimiento de Findings y Planes de Acción.

*Cuadros de mando (KPI/KRI), Responsable de Riesgos Tecnológicos - Michael Page
Consultor/a de Seguridad ISO 27001 - Baoss
GRC Cybersecurity Specialist (ISO 27001) Aviation - WAMOS AIR
Consultor/a Normativa Ciberseguridad - GMV


## Related Videos

- [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Best Job Boards for Remote Work for Developers](https://www.wearedevelopers.com/magazine/290-best-job-boards-for-remote-work-for-developers)