Senior PM Cibersecurity (GRC)

Location: Hybrid in Madrid, Spain

Company

hirify.global is an independent technology consulting firm delivering technology guidance and solutions through an international team across more than 60 countries.

What you will do

• Manage cybersecurity risks across Salesforce, CRM, and e-commerce projects throughout design, implementation, and operations.
• Lead risk assessments and define treatment plans with mitigation measures, owners, deadlines, and status tracking.
• Coordinate with project managers, product owners, security architects, engineers, and business stakeholders.
• Monitor security controls, incidents, non-compliances, and remediation action plans.
• Prepare risk dashboards and KPIs for steering committees and management.
• Contribute to security policies, standards, procedures, awareness, and governance activities.

Requirements

• 5–8 years of experience managing cybersecurity projects.
• Experience in GRC, cybersecurity risk management, or security governance.
• Experience identifying, assessing, prioritizing, and tracking project and implementation risks.
• Ability to coordinate mitigation plans with IT, security, and business teams.
• Knowledge of CRM, e-commerce, or other business-critical applications.
• High level of English required for daily collaboration with international teams.

Nice to have

• Salesforce security or other major CRM and e-commerce platform experience.
• Knowledge of ISO 27001, NIST, or other risk management frameworks and security standards.
• CISM, CISSP, ISO 27005, or ISO 27001 Lead Implementer/Auditor certification.
• Experience in multinational or multi-country environments.

Culture & Benefits

• Hybrid work in Madrid within an international cybersecurity and GRC environment.
• Exposure to projects and teams across Europe and beyond.
• Continuous learning and international career opportunities within hirify.global and the Mantu Group.
• Inclusive environment focused on ownership, collaboration, and technical excellence.

Hiring process

• Brief virtual or phone call.
• Typically three interviews with the line manager and other relevant team members.
• Role-dependent case study, technical assessment, role play, or problem-solving exercise.