GRC Lead

<p>Here&#8217;s a concise advert that recruits for <strong>both positions</strong> in one post, while keeping the same style as your Technology Lead advert.</p> <h1><strong>GRC Analyst &amp; GRC Lead &#8211; Programme Risk &amp; Assurance (Information Security)</strong></h1> <p>We&#8217;re looking for experienced <strong>GRC Analysts</strong> and <strong>GRC Leads</strong> to join a leading global technology organisation&#8217;s Programme Risk &amp; Assurance team within the Information Security function. These roles will support the delivery of a large-scale Governance, Risk &amp; Compliance programme, helping strengthen information security governance, risk management, and control assurance across multiple international marketplaces.</p> <p>Whether you&#8217;re an experienced GRC Analyst looking to take the next step or an established GRC Lead with stakeholder management and programme delivery experience, we&#8217;d love to hear from you.</p> <p><strong>Employment Type:</strong> 4 Months &#8211; Contract</p> <p><strong>Location:</strong> Hybrid &#8211; Barcelona, Spain (Madrid considered)</p> <p><strong>Rate/Salary:</strong> TBC after discussion</p> <p>Support and coordinate Information Security Governance, Risk &amp; Compliance activities.</p> <p>Conduct and support risk-led self-assessments against security control frameworks.</p> <p>Review security controls, identify gaps, and support remediation planning.</p> <p>Collect, review, and manage control evidence and compliance documentation.</p> <p>Maintain trackers, action logs, reporting packs, and remediation plans.</p> <p>Support internal audits, risk exception reviews, and stakeholder reporting.</p> <p>Work closely with Information Security teams, control owners, auditors, and business stakeholders.</p> <p>Facilitate workshops, follow up on actions, and drive programme delivery.</p> <p>For GRC Leads, provide leadership, manage analyst activities, and deliver senior stakeholder-ready reporting.</p> <p>Experience within Governance, Risk &amp; Compliance (GRC), Information Security, IT Risk, Technology Risk, Internal Audit, Compliance, or Technology Assurance.</p> <p>Experience performing risk assessments, control reviews, compliance activities, or IT control assessments.</p> <p>Strong understanding of Information Security controls and governance.</p> <p>Experience working with stakeholders across technical and business teams.</p> <p>Excellent organisational, communication, and documentation skills.</p> <p>Ability to manage multiple workstreams and deliver within a fast-paced environment.</p> <p>Experience with ISO 27001, NIST CSF, GDPR, NIS2, SOC 2, or similar security frameworks.</p> <p>Experience using AuditBoard, Jira, or similar GRC and workflow platforms.</p> <p>Knowledge of Identity &amp; Access Management (IAM), Vulnerability Management, Third-Party Risk, Incident Response, Cloud Security, or Security Awareness.</p> <p>Experience within Technology, SaaS, E-commerce, Marketplace, or Digital organisations.</p> <p>Spanish-speaking candidates or those based in Barcelona are highly desirable.</p> <p><strong>If you&#8217;re a GRC Analyst or GRC Lead with a background in Information Security, Governance, Risk &amp; Compliance, IT Risk, or Technology Assurance and are interested in your next contract opportunity, we&#8217;d love to hear from you.</strong></p> <p>Please send your CV to <strong><a href="mailto:Khayelihle.Matshayana@darwinrecruitment.com">Khayelihle.Matshayana@darwinrecruitment.com</a></strong></p> <p>Darwin Recruitment is acting as an Employment Business in relation to this vacancy.</p> <p><img src="https://counter.adcourier.com/S2hheWVsaWhsZS5NYXRzaGF5YW5hLjQ0ODY1LjEyNzg0QGRhcndpbi5hcGxpdHJhay5jb20.gif"></p> <p><span style="color: #ffffff">Khayelihle Matshayana</span></p>