🛠 Tech Stack

💼 About This Role

You'll join a mature security program at a PE-backed SaaS company and push compliance-as-code further into continuous auditing and AI governance. You'll handle the nuanced security questions that can't be automated, shaping how we communicate our security posture to enterprise customers.

🎯 What You'll Do

• Own continuous improvement of ISMS and control environment
• Handle complex security questions and customer assurance calls
• Expand compliance-as-code into continuous auditing and automated evidence collection
• Mature AI governance program under ISO 42001 and EU AI Act

📋 Requirements

• 3+ years in information security with GRC focus
• Working knowledge of ISO 27001 and SOC 1, SOC 2, or C5
• Ability to translate security controls into business language

✨ Nice to Have

• Experience with AWS cloud-native infrastructure
• Familiarity with Vanta, Orca Security, Aikido, or GitHub Actions
• Knowledge of AI governance and EU AI Act

🎁 Benefits & Perks

• 🏖️ Flexible remote work from anywhere in Spain
• 💰 Competitive salary and equity package
• 📈 Professional development budget
• 💻 Latest tech tools including AI subscriptions

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Call· 30 min
2. 2Technical Interview· 60 min
3. 3Hiring Manager Interview· 60 min