GRC Consultant

Description

**Company Description** ----------------------------- Why work at Sopra Steria? Because working here also means feeling **Sopra Steria**. We are a renowned European leader in consulting, digital services, and software development, with nearly 56,000 employees across nearly 30 countries—and over 4,000 in Spain. We focus on people—on their training and professional development—which drives us to grow and continuously improve. We are passionate about the digital world, and just like you, we seek the greatest adventure. We want your everyday experience to become your greatest source of inspiration: to learn, contribute, have fun, grow—and above all, enjoy yourself to the fullest. If you want to join a "**Great Place to Work**" team, keep reading! **Job Description** -------------------------- **What challenge do we propose?** For our Cybersecurity Unit, we are seeking Cybersecurity Consultants specializing in GRC, based in Madrid. We welcome both junior and senior consultants. **Requirements** -------------- **What are we looking for?** We seek consultants with cybersecurity experience, preferably in GRC or risk management: * Experience or participation in security risk analyses (SRA) * Basic knowledge of ISMS implementation and maintenance * Knowledge of regulatory frameworks: * ISO 27001 * ISO 22301 * ENS (desirable) **Capabilities** * Risk identification and analysis * Support in modeling risk scenarios * Asset inventory management and updating **Responsibilities** **Risk Management** * Participation in information security risk analyses aligned with ISO 27001 / ENS * Identification of assets, threats, and vulnerabilities * Support in risk evaluation and assessment * Collaboration in defining and monitoring treatment plans * Asset Management * Support in asset inventory and classification * Maintenance and updating of the asset register within GRC tools **Regulatory Compliance** * Support in implementing and maintaining management systems compliant with: * ISO 27001 * ISO 22301 * ENS * Support in executing regulatory gap analyses * Collaboration in updating policies, procedures, and documentation **Third-Party Management** * Participation in third-party security assessments * Support in supplier risk analysis * Basic monitoring of security requirement compliance * Reporting and Governance * Support in defining and monitoring security KPIs * Preparation of reports (weekly and monthly) * Participation in security committees and governance bodies (PRM / TRM or others) **Additional Information** ------------------------- **What do we offer you?** * Permanent contract and full-time hours * 23 vacation days * Continuous training: technical, transversal, and language skills. Access to certifications, training from leading technology partners, online platforms—and much more! * Life and accident insurance * Flexible compensation options (health insurance, childcare vouchers, transportation, meal vouchers, training) * Access to the Privilege Club, offering attractive discounts with major brands * Personalized and detailed onboarding. We support you every step of the way so you feel \#soprano from day one. * Office with dedicated leisure spaces—where work and fun come together! * Team spirit and a positive atmosphere—we truly believe in the power of unity. And most importantly…you’ll have the opportunity to develop your professional career with us: Together, we’ll create a personalized career plan. You’ll receive training, set goals, and undergo regular follow-up to ensure we achieve them—together. We listen to your priorities and fight for them. Your voice matters here! Join us and be part of something greater! **The world is how we shape it** At Sopra Steria, we are committed to building a diverse and inclusive environment, objectively evaluating each candidate based on their competencies and experience. We firmly believe that diversity of experience and perspective is what fuels our innovation.