GRC Security Expert

About the role

Leadtech, a digital business founded in 2009 with over 700 employees, is expanding its Security team to strengthen security frameworks, run data protection audits and lead data privacy initiatives. As a GRC Security Expert you will develop cybersecurity policies and standards, manage multiple projects and work with product, engineering and marketing teams.

Key responsibilities

• Develop cybersecurity policies, procedures and methodologies, implementing standards and regulations
• Manage several projects at once (ISO 27001, vulnerability follow-up, vendor reviews) while keeping quality and alignment with applicable regulations
• Develop data protection and privacy initiatives, proactively troubleshooting and resolving issues
• Work with stakeholders to gather requirements, evaluate options and build tools and processes

Required profile

• Degree in Computer Science, Telecommunications, Law or equivalent practical experience
• 1 to 2 years of experience in GRC, compliance, IT auditing or a related role
• Experience as an auditor, consultant or implementation specialist
• Working knowledge of ISO 27001:2022 (clause structure, Annex A controls, SoA)
• Working knowledge of core data protection concepts (data retention, PIAs, RATs)
• Strong written communication in English and Spanish; policies and audit deliverables in English, daily coordination in Spanish
• Organized, proactive and able to escalate gaps and overdue items independently

Required skills

• ISO 27001:2022
• Data protection concepts (PIAs, RATs)
• Basic familiarity with cloud platforms (AWS, GCP, Azure) and IAM concepts such as least privilege, MFA and key rotation
• Desirable: ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISA, CISM certification; exposure to NIS2; familiarity with GRC platforms or vulnerability management tools; experience supporting vendor security assessments

What we offer

• Permanent full-time position with competitive salary and private health insurance (dental and psychological services)
• 25 days of vacation plus a day off on your birthday, with flexible leave
• Flexible schedule, flextime and the option to work fully remote or from the Barcelona office
• Free Friday afternoons, 35-hour week in July and August, and a 7-hour workday
• Internal training and an annual budget for external learning
• Office perks in Barcelona: free coffee, fruit and snacks, game room, rooftop terrace, ticket restaurant and nursery vouchers