GRC Consultant

Description

**Description:** ---------------- At Iris, we don’t just build companies—we forge leaders in technological innovation. Our mission is to redefine our clients’ future through the most advanced technologies (Cloud, Cybersecurity, Data, AI). We are driven by ambition, excellence, innovation, transparency, empathy, and trust. We invite you to join Ciberia—the new global benchmark for managed cybersecurity services powered by Artificial Intelligence and backed by Google Cloud Security. We are a Google Premier Partner in Cybersecurity for EMEA and LATAM, operating across 5 countries. If you seek an environment where your professional judgment impacts strategic projects and where you work with cutting-edge technology, this is the place for you. Are you passionate about data privacy and cybersecurity? Are you looking to advance your career by participating in key GDPR, ISO 27001, and ENS projects? Ciberia continues to grow, and we are seeking to hire a Junior GRC Consultant for our Barcelona team—someone dynamic, eager to learn, and full of potential. **What will be your mission?** You will join a multidisciplinary team where you’ll combine data protection with information security: **Privacy and Data Protection (Your primary area):** * Support GDPR/LOPDGDD compliance initiatives and ongoing Record of Processing Activities (RAT) maintenance. * Draft privacy notices and manage ARCO/POL data subject rights. * Assist in conducting Data Protection Impact Assessments (DPIAs) and privacy audits. * Provide customer support and incident handling under the supervision of the Data Protection Officer (DPO). **Management Systems and Security (You’ll learn and actively collaborate):** * Participate in implementation and maintenance projects for ISO 27001 and ENS. * Support Business Continuity projects (ISO 22301 and BIA analysis). * Collaborate on integrated internal audits and drafting of security policies/procedures. **Requirements:** --------------- **What are we looking for?** * Experience: 1–2 years in GRC or privacy consulting (we value potential and eagerness to grow!). **Regulatory knowledge:** * Strong: LOPDGDD and GDPR. * Basic / Intermediate: Interest in and familiarity with ISO 27001, ENS, and ISO 22301\. * Integrated perspective: Ability to understand how information security directly impacts privacy. **Location:** Residence in Barcelona **Bonus points if you have:** * Law degree with a Master’s in Cybersecurity/ICT, or a Technical/Engineering degree with specialization in Technology Law. * Certifications in progress or completed (e.g., DPO certification, ISO 27001 Foundation/Auditor, etc.). If you’re ready to transform cybersecurity alongside Google’s Premier Partner—applying your passion for technology in an environment that values ambition and excellence—we want to meet you!