Cybersecurity GRC Consultant (SAP)

Location: Madrid

Company

hirify.global is an independent technology consulting firm providing technology guidance and solutions to businesses through an international team across more than 60 countries.

What you will do

• Support security governance and risk analysis across Operations and Finance application landscapes.
• Assess security risks for SAP and other key business applications.
• Review confidentiality, integrity, and availability requirements and verify that appropriate controls are in place.
• Track remediation plans, security findings, and the security status of the application portfolio.
• Prepare security committees, dashboards, KPIs, and risk reports.
• Coordinate risks, controls, and action plans between IT owners, business teams, and the RSSI/CISO.

Requirements

• 2–4 years of experience in cybersecurity, GRC, governance, or risk analysis; senior profiles are also welcome.
• Experience assessing security risks for business applications and following up on remediation plans.
• Ability to prepare risk documentation, KPIs, and security committee materials.
• Strong communication, stakeholder management, and organizational skills.
• Good level of English for meetings, documentation, and committees.

Nice to have

• Experience reviewing cybersecurity clauses in contracts with vendors and partners.
• Experience with SAP security or SAP GRC.

Culture & Benefits

• Flexible policies and remote work options.
• Tailored career development path and salary evaluations.
• Tech Academy, Udemy, language sessions, webinars, and workshops.
• Annual personal training budget and company-paid certifications.
• Transit and restaurant tickets, kindergarten support, private health insurance, and the WeCare program.

Hiring process

• Brief virtual or phone call.
• Approximately three interviews, depending on seniority.
• Possible case study, technical assessment, role play, or problem-solving exercise.