> Markdown version of [/jobs/ext/4595053-consultant-grc](https://www.wearedevelopers.com/jobs/ext/4595053-consultant-grc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Consultant GRC

- **Company:** Devoteam
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Smartsuite, National Institute of Standards and Technology Cybersecurity Framework, Servicenow
- **Published:** November 6, 2026
- **Apply:** https://www.adzuna.es/details/5954147120

## About the Role

Master in Cybersecurity or equivalent certifications (CISM, CISA, CISSP, ISO 27001 Lead Auditor, ENS, etc.)

## Description

We are looking to stably incorporate a Senior GRC Consultant. The work modality is in-person in Getafe. Main functions:

 * Management and execution of GRC activities.
 * Security governance, regulatory compliance, control framework, and technological risk.
 * Participation in internal/external audits (ISO 27001, NIST, ENS, GDPR...).
 * Preparation of executive reports and technical documentation.
 * Coordination with the client's global teams.
 * Monitoring of action plans, KPIs, and security maturity.

Technologies and frameworks:

 * Frameworks and standards: ISO 27001/27002, NIST CSF, ENS
 * Regulation: GDPR
 * Corporate GRC tools: Archer, ServiceNow GRC, OneTrust