Consultant Security ISO 27001, Cloud (AWS & Azure)

About the role

We are looking for a Consultant Security ISO 27001, Cloud (AWS & Azure) for a major insurance client. The role is hybrid, with 1‑2 days per week in our Madrid office.

Key responsibilities

• Perform monthly security governance with GDAI product teams, following up risk assessments, pentests and remediation actions.
• Regularly review security alerts in AWS GuardDuty and manage incident response.
• Conduct access reviews for GDAI assets, including preparation, template completion, recertification requests and evidence collection.
• Act as the primary point of contact for GDAI security assurance, reviewing procedures and collecting evidence.
• Report security status to GDAI Operations and GDAI Security Operations Management.

Required profile

• Fluent English environment (mandatory).
• General information security expertise.
• Experience implementing ISO 27001.
• Understanding of security testing and cloud security (AWS & Azure).
• Ability to work with security governance and incident management processes.

Required skills

• ISO 27001
• AWS
• Azure
• Security testing
• Risk assessment
• Penetration testing
• Vulnerability remediation
• Access review processes