




Job Summary: We are seeking a passionate GRC Consultant with expertise in management systems and security to redefine AI-driven cybersecurity with Google Cloud Security. Key Highlights: 1. Redefine AI-driven cybersecurity 2. Make an impact on strategic projects with cutting-edge technology 3. An environment that values ambition and excellence **Description:** ---------------- Join Ciberia and redefine the future of AI-driven cybersecurity! At Iris, we don’t just build companies—we forge leaders in technological innovation. Our mission is to redefine our clients’ futures through the most advanced technologies (Cloud, Cybersecurity, Data, AI). We are driven by ambition, excellence, innovation, transparency, empathy, and trust. We invite you to join Ciberia—the new global benchmark for managed cybersecurity services, powered by Artificial Intelligence and backed by Google Cloud Security. We are a Google Premier Partner in Cybersecurity for EMEA and LATAM, operating across 5 countries. If you seek an environment where your professional judgment impacts strategic projects and where you work with cutting-edge technology, this is your place. We are looking for a **GRC Consultant** to join our team—someone deeply passionate about management and security systems. **What You’ll Do:** * Management and Security Systems (Active Participation): * Implementation and Maintenance: Collaborate on implementation and maintenance projects for systems compliant with ISO 27001 and the Spanish National Security Scheme (ENS), covering both documentation and technical aspects. * Business Continuity: Participate in ISO 22301 projects, assisting in developing Business Impact Analyses (BIA) and continuity plans. * Integrated Internal Audit: Conduct internal audits jointly evaluating security and privacy controls. * Document Management: Develop policies, procedures, and regulations addressing both security and privacy requirements. **Requirements:** --------------- **What We’re Looking For in You:** * Experience: Minimum 3 years in GRC consulting. You must demonstrate proven experience participating in ISO 27001 and/or ENS projects. * Regulatory Knowledge: * Advanced/Intermediate: ISO 27001 (Information Security), ENS (Spanish National Security Scheme), ISO 22301, GDPR—both at documentation and technical levels. * Integrative Vision: Ability to understand how a security control (e.g., Access Management) impacts regulatory compliance. **What We Offer:** * Inspiring Location: Offices in Barcelona’s upscale district, offering panoramic views and a natural surroundings setting designed to foster innovation and well-being. * Development and Stability: Defined career path supporting your long-term growth \+ Investment in your training, including free access to multiple e-learning platforms. * Elite Mentorship: Intensive mentorship period at the start of your onboarding to ensure your success in the role. * Holistic Well-being: Free access to a comprehensive plan covering nutrition, physiotherapy, and coaching. Your physical and mental health is our top priority. * Rest and Other Benefits: Enjoy 23 working days of vacation per year and optimize your salary with a flexible compensation plan (health insurance, meal vouchers, transportation allowance, childcare vouchers). If you’re ready to transform cybersecurity alongside Google’s Premier Partner—applying your passion for technology within an environment that values ambition and excellence—we want to meet you!


