GRC Consultant

Description

Job Summary: We are seeking a GRC Consultant with experience in data protection, ISO 27001, and ENS to join an innovative team focused on AI-driven cybersecurity. Key Highlights: 1. Redefine AI-driven cybersecurity with Google Cloud Security. 2. Participate in strategic projects and cutting-edge technology. 3. Defined career path and intensive mentoring for growth. **Description:** ---------------- Join Ciberia and redefine the future of AI-driven cybersecurity! We invite you to become part of Ciberia, the new global benchmark in managed cybersecurity services, powered by Artificial Intelligence and backed by Google Cloud Security. We are a Google Premier Partner in Cybersecurity for EMEA and LATAM, operating in 5 countries. If you seek an environment where your professional judgment impacts strategic projects and where you work with cutting-edge technology, this is the place for you. We are looking for a **GRC Consultant** to join our team. Your primary responsibility will be ensuring compliance with Data Protection regulations (LOPDGDD/GDPR) for our clients. Concurrently, you will work cross-functionally on ENS, ISO 27001, and ISO 22301 alignment projects, adding value to risk and controls management. **Your Key Responsibilities** **Data Protection (Primary Focus):** * Comprehensive management of LOPDGDD/GDPR (Records of Processing Activities, clauses, ARCO rights). * Conducting legal audits and Data Protection Impact Assessments (DPIAs). * DPO support and advisory services regarding privacy incidents. **Management Systems and Security:** * Implementation and maintenance of ISO 27001 and ENS. * Participation in Business Continuity projects (ISO 22301, BIA). * Integrated internal audits and development of technical policies/standards. **Management and Leadership:** * Coordination and supervision of junior consultants. * Direct client interaction in Barcelona. **Requirements:** --------------- **What We Are Looking For:** **Experience:** Minimum 3 years in GRC consulting. **Profile:** Solid foundation in LOPDGDD/GDPR with demonstrable experience in ISO 27001 and/or ENS projects. **Knowledge:** Expertise in Privacy; advanced/intermediate level in ISO 27001, ENS, and ISO 22301\. **Integrated Perspective:** Ability to understand how a technical control impacts legal compliance. **Languages:** Catalan and English (B2\). **Location:** Residence in Barcelona. **Desirable:** * Law degree with Master’s in Cybersecurity/ICT (or technical background with Master’s in Technological Law). * Certifications: DPO, ISO 27001 / 22301 Implementer or Lead Auditor\. **What We Offer:** * Inspiring Location: Offices in the upper area of Barcelona, offering panoramic views and a natural surroundings environment designed to foster innovation and wellbeing. * Development and Stability: Defined career path for your long-term growth \+ Investment in your training with free access to multiple e-learning platforms. * Elite Mentoring: Intensive mentoring period at the start of your onboarding to ensure success in your role. * Holistic Wellbeing: Free access to a comprehensive nutrition, physiotherapy, and coaching program. Your physical and mental health is our top priority. * Rest and Other Benefits: Enjoy 23 working days of vacation per year and optimize your salary with a flexible compensation plan (health insurance, meal card, transportation, childcare vouchers). If you are ready to transform cybersecurity alongside Google’s Premier Partner—applying your passion for technology within an environment that values ambition and excellence—we want to meet you!