GRC Consultant

Role Summary

What challenge do we propose?

For our Cybersecurity Unit, we are looking for Cybersecurity Consultants with specialization in GRC and located in Madrid.

We are looking for both junior and senior consultants.

ISO 22301

• ENS (assessable)
• Capabilities
• Risk identification and analysis
• Support in modeling risk scenarios
• Asset inventory management and updating
• Features
• Risk management
• Participation in information security risk analysis aligned with ISO 27001 / ENS
• Identification of assets, threats and vulnerabilities
• Support in risk assessment and assessment
• Collaboration in the definition and monitoring of treatment plans
• Asset management
• Support in inventory and classification of assets
• Maintenance and updating of the asset registry in GRC tools
• Regulatory compliance
• Support in the implementation and maintenance of management systems in accordance with:

ISO 22301

• ENS
• Support in the execution of regulatory gap analysis
• Collaboration in updating policies, procedures and documentation
• Supplier management
• Participation in third party security assessment
• Support in supplier risk analysis
• Basic monitoring of compliance with security requirements
• Reporting and government
• Support in the definition and monitoring of security KPIs
• Preparation of reports (weekly and monthly)
• Participation in security committees and governing bodies (PRM / TRM or others)

Requirements

• We are looking for consultants with experience in cybersecurity, preferably in GRC or risk management:
• Experience or involvement in security risk analysis (SRA)
• Basic knowledge of ISMS implementation and maintenance

Benefits

• What do we have for you?
• Permanent contract and full time

23 days of vacation

Continuous training: technical, transversal and language skills. We have access to certifications, training from the main Technology Partners, online platforms and much more!

• Life and accident insurance
• Possibility of benefiting from our flexible remuneration (medical insurance, daycare vouchers, transportation, food and training)
• Access to Privilege Club, where you will find interesting discounts on the main brands
• Personalized and detailed onboarding. We accompany you at all times so that you feel #soprano from the first moment.
• Office with spaces reserved for leisure. Work and fun together!
• Camaraderie and good atmosphere, we keep in mind the power of unity.
• And most importantly...You have the possibility of developing your professional career with us: We will create a personalized career plan together. You'll train, we'll set goals, and we'll follow up to make sure we get there together. We listen to your priorities and fight for them.
• Your voice matters here! Join us and be part of something more!

The world is how we shape it

At Sopra Steria we are committed to creating a diverse and inclusive environment, evaluating each candidate objectively, based on their skills and experience. We firmly believe that diversity of experiences and perspectives is what drives our innovation.

About the Company

Because working at Sopra Steria is also feeling Sopra Steria.

We are a recognized European leader in consulting, digital services and software development, with nearly 56,000 employees in almost 30 countries and more than 4,000 in Spain.

We focus on people, their training and professional development, which drives us to constantly grow and improve.

We have a passion for digital and, like you, we seek the best of adventures. We want your daily life to become the best of your inspirations. May you learn, contribute, have fun, grow and, above all, enjoy to the fullest.

If you want to be part of a “Great Place to Work” team, keep reading!