> Markdown version of [/jobs/ext/3473955-grc-senior-analyst](https://www.wearedevelopers.com/jobs/ext/3473955-grc-senior-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Senior Analyst

- **Company:** Postaladdress
- **Location:** Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Data Mapping, Systems Development Life Cycle, Data Processing, Information Security Management System, Google Cloud, Cloud Platform System
- **Published:** September 5, 2026
- **Apply:** https://startup.jobs/hq-grc-senior-analyst-jobandtalent-8904759

## About the Role

* 8+ years of experience in GRC, Risk, Compliance, or IT Audit roles
 * 5+ years of strong hands-on experience with ISO 27001 and experience managing or supporting ISMS implementation.
 * 3+ years of practical experience with GDPR data mapping, reviewing systems from the tech side.
 * 5+ years of experience from a product tech company with global client reach in the US & EU (companies above 100 people).
 * Experience working with internal and external auditors
 * Very strong stakeholder management and communication skills across technical and non-technical teams.
 * Fluent English

## Description

* Own and lead the company's GRC implementation across ISO 27001 and GDPR.
 * Build and manage the Information Security Management System (ISMS) aligned with ISO 27001.
 * Ensure GDPR compliance across all data processing activities, including data mapping, data leaks, and encryptions.
 * Act as the primary point of contact for auditors and prepare the company for ISO audits.
 * Identify compliance gaps and drive remediation plans with technical and non-technical teams.
 * Develop governance policies, procedures, and risk management frameworks.
 * Partner closely with Engineering and Security teams to embed controls into systems and SDLC processes.
 * Monitor regulatory and compliance changes and translate them into actionable requirements.