> Markdown version of [/jobs/ext/4697699-information-security-analyst-grc-isms](https://www.wearedevelopers.com/jobs/ext/4697699-information-security-analyst-grc-isms). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst, Grc & Isms

- **Company:** Gmv
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Temporary contract
- **Skills:** Cyber Security, Information Security Management System
- **Published:** November 13, 2026
- **Apply:** https://www.adzuna.es/details/5963823394

## About the Role

For this position, we are looking for a Compliance Cybersecurity Engineer with experience in Governance, Risk & Compliance (GRC), Information Security Management Systems (ISMS), audit processes, information security controls and risk treatment plans.
You should also have knowledge of:
Security regulations and standards such as ISO/IEC *****, ENS, NIS2, etc.
Risk assessment and risk management methodologies.
Security requirements for suppliers and third parties.
Additionally, the following will be considered a plus:
Certifications such as CISM, CRISC, CISSP, CISA, ISO/IEC ***** Lead Auditor, or similar.
Knowledge of operational resilience and business continuity frameworks.
Experience working in regulated environments or critical infrastructure sectors.
A high level of English proficiency is required.

## Description

If you wanted to be Anonymous, but the pandemic made you realize that wearing a mask is not your cup of tea...
Your place is with us!
We are expanding our Corporate Cybersecurity Compliance team to help manage risks, ensure regulatory compliance, and strengthen our security framework.
We ?ll get to the point; we'll tell you what's not on the web.
If you want to know more about us go to GMV website.
WHAT CHALLENGE WILL YOU BE TAKING ON?
In collaboration with the team, you will be responsible for maintaining and evolving the corporate Information Security Management System (ISMS).
You will also contribute to all the processes required to ensure and enhance information protection, resilience, and compliance with established requirements.
Your responsibilities will include:
Activities related to regulations, standards, and frameworks applicable in the countries where GMV operates (ISO/IEC *****, ENS, NIS2, etc.), including both internal and external audits.
Defining and monitoring metrics, indicators (KPIs/KRIs), and management dashboards.
Analyzing, assessing, and managing internal and third?party risks, while promoting initiatives to prevent and mitigate them.
Developing and reviewing security and compliance policies, methodologies, and documentation.
Supporting the preparation of security committees, management reviews, and ISMS governance activities.
WHAT DO WE NEED IN OUR TEAM?