Cybersecurity Risk and Compliance Lead

Description

Job Summary: The Cybersecurity Risk and Compliance Lead will lead the global Governance, Risk, and Compliance (GRC) function in cybersecurity, ensuring alignment with international standards and industry regulations. Key Highlights: 1. Lead the global Cybersecurity GRC function 2. Coordinate global risk management and compliance programs 3. Lead the global cybersecurity awareness program Cybersecurity Risk and Compliance Lead **Location:**Gestamp Corporate Madnum, ES, Gestamp Co **Date:** Jan 12, 2026 The **Cybersecurity Risk and Compliance Lead** will be responsible for leading the organization’s global **Governance, Risk, and Compliance (GRC)** function in cybersecurity, ensuring alignment with international standards, industry regulations, and internal requirements. They will serve as the cybersecurity GRC subject-matter expert across the company’s 24 operating countries, coordinating global risk management, compliance, and security policy programs, and ensuring a consistent control framework across all regions. They will work cross-functionally with IT, OT, engineering, legal, data privacy, and business units. Key Responsibilities: * Manage the global GRC function and ensure compliance with standards such as TISAX, NIST, GDPR, SWIFT, among others. * Manage evidence required for certifications and global compliance programs. * Manage the **global GRC team** and oversee outsourced security services. * Lead the global **cybersecurity awareness and training program**. * Design and maintain corporate policies, procedures, and standards. * Lead risk management processes, audits, and assessments in **IT/OT** environments. * Prioritize mitigation plans and oversee their execution. * Manage supply chain security and third-party assessments. * Develop executive reports and dashboards on maturity, risks, and compliance. * Collaborate with global IT, OT, engineering, HR, legal, and business units. * People, service, and vendor management. Requirements: * Degree in Computer Engineering, Telecommunications, Cybersecurity, or related field. * Valued certifications: CISM, CISSP, CRISC, ISO 27001, TISAX, NIST. * **7–10 years of experience** in cybersecurity, including at least **3–5 years in GRC**. * Experience leading **teams**, **vendors**, and international projects. * Experience in security awareness and culture-building programs. * Knowledge of industrial/OT cybersecurity (highly desirable). * **Fluent English** Key Competencies: * Leadership, team management, and communication with global stakeholders. * Analytical ability, risk orientation, and decision-making skills. * Excellent communication and change management skills. * Strategic vision and ability to operate effectively in multinational environments. *All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.* *We are an Equal Opportunity Employer and seek to hire the best candidate regardless of age, beliefs, disability, ethnicity, gender or sexual orientation.* About us We are a multi\-technology company present in over 20 countries and our team of over 40,000 is made up of 90 different nationalities. They are the driving force of our company, which designs, develops and produces parts for over 900 models of the leading vehicle manufacturers, and enable us to be one of the top suppliers worldwide. **Do you have what it takes to build the future of mobility with us?** * You will be joining a leading international group in the automotive sector with a clear commitment to innovation, a trail\-blazer in Industry 4\.0 and engaged with ESG (Environmental, Social and Governance) criteria. * This is an opening to build a career in a global environment with many opportunities to grow both professionally and personally by participating and leading innovative and international projects. * You will find a supportive and friendly environment where the emphasis is on team work, continuous improvement, trust, a dynamic spirit and thinking outside the box, and a passion for a job well done. * You will be working with highly qualified professionals as Gestamp is committed to the ongoing training of our teams. **Join the Gestamp team!**