Information Security GRC Analyst (Cybersecurity)

Location: Pozuelo de Alarcón, Madrid, Spain

Company

hirify.global provides professionally monitored alarm, security, monitoring, response, maintenance, and technical support services for residential households and small businesses across Europe and Latin America.

What you will do

• Build and maintain the Information Security audit function.
• Manage and mature the Information Security and IT risk control framework, including third-party and partner controls.
• Document and report control failures, risks, vulnerabilities, and gaps; provide remediation guidance and help drive mitigation projects.
• Develop security policies, standards, and procedures to standardize and centralize control activities.
• Perform IT and business-process risk, compliance, maturity, and control assessments.
• Track remediation plans, define KPIs and KRIs, conduct audits, and prepare reports for management and stakeholders.

Requirements

• Bachelor’s degree in a relevant field and at least 4 years of direct Information Security and IT risk and compliance experience.
• Experience working in GRC departments and creating, executing, and maintaining Information Security and IT risk control frameworks for internal operations, third parties, and partners.
• Experience documenting security procedures, policies, and standards.
• Experience performing Information Security and IT assessments, compliance and maturity assessments, and control audits using international standards and industry best practices.
• Ability to actively manage, monitor, document, and mitigate risks, vulnerabilities, and non-conformities.
• Experience defining and tracking KPIs and KRIs and adapting reporting for different stakeholders.
• Understanding of regulatory and control frameworks including SOC 2, NIST, GDPR, COBIT, and ITIL.
• Planning, problem-solving, and complex technical analysis skills, with the ability to build professional relationships and collaborate with stakeholders.
• Fluent written and verbal English communication skills and availability to travel.

Nice to have

• Security certifications such as CISSP, CRISC, CISM, CISA, Security+, or ISO 27001.
• Proficiency with MS Office, project management, and at least one GRC tool.
• Familiarity with auditing, monitoring, controlling, and process assessment.

Culture & Benefits

• Permanent, full-time position in an international organization.
• Work alongside Technology, business units, risk owners, and control owners.
• Work environment emphasizes integrity, collaboration, accountability, and an entrepreneurial spirit.
• hirify.global is an equal-opportunity employer and welcomes applicants from diverse backgrounds.

Hiring process

• Apply through the hirify.global careers portal; applications are not accepted by email.