Information Security and Compliance Analyst

About the role

Join GMV's corporate Cybersecurity team as an Information Security and Compliance Analyst. Working under the corporate CISO, you will help protect the organization by ensuring compliance with international security standards and directives.

Key responsibilities

• Conduct internal audits for standards such as ISO 27001, ENS, and other relevant frameworks.
• Support the adaptation to the European NIS2 directive and its national transpositions.
• Assist in the rollout of the corporate Business Continuity Management system and the supply‑chain security system.
• Maintain and update the ISO 27001 management system to the latest version.

Required profile

• At least one year of experience in information‑security audit processes.
• Familiarity with security regulations such as ISO 27001, National Security Scheme or NIST 2.
• Ability to produce clear, standards‑compliant documentation.
• Experience with Information Security Management Systems (ISMS) and internal audit execution.

Required skills

• Risk analysis tools
• Governance, Risk, and Compliance (GRC) platforms
• Vulnerability management solutions

What we offer

• Hybrid working model with up to 8 weeks of teleworking per year.
• Flexible start/end times and intensive Friday/summer schedules.
• Personalized career development, training, and language‑learning support.
• National and international mobility, including relocation assistance.
• Competitive compensation, wellbeing program, health and dental insurance, and various employee perks.