Jobs › Information Security Analyst, GRC & ISMS
Information Security Analyst, GRC & ISMS
Job at a glance
- Category
- Compliance
- Work arrangement
- Hybrid
- Location
- Tres Cantos, Madrid
- Posted
- Nov 8, 2026
Free. One click to unsubscribe. We never share your address.
GMV is hiring a Information Security Analyst, GRC & ISMS in Tres Cantos, Madrid. This is a Compliance job in the governance, risk, and compliance field. Review the full details below and apply directly with GMV.
If you wanted to be Anonymous, but the pandemic made you realize that wearing a mask is not your cup of tea… Your place is with us!
We are expanding our Corporate Cybersecurity Compliance team to help manage risks, ensure regulatory compliance, and strengthen our security framework.
We´ll get to the point; we'll tell you what's not on the web. If you want to know more about us go to GMV website.
WHAT CHALLENGE WILL YOU BE TAKING ON?
In collaboration with the team, you will be responsible for maintaining and evolving the corporate Information Security Management System (ISMS). You will also contribute to all the processes required to ensure and enhance information protection, resilience, and compliance with established requirements. Your responsibilities will include:
- Activities related to regulations, standards, and frameworks applicable in the countries where GMV operates (ISO/IEC 27001, ENS, NIS2, etc.), including both internal and external audits.
- Defining and monitoring metrics, indicators (KPIs/KRIs), and management dashboards.
- Analyzing, assessing, and managing internal and third-party risks, while promoting initiatives to prevent and mitigate them.
- Developing and reviewing security and compliance policies, methodologies, and documentation.
- Supporting the preparation of security committees, management reviews, and ISMS governance activities.
WHAT DO WE NEED IN OUR TEAM?
For this position, we are looking for a Compliance Cybersecurity Engineer with experience in Governance, Risk & Compliance (GRC), Information Security Management Systems (ISMS), audit processes, information security controls and risk treatment plans. You should also have knowledge of:
- Security regulations and standards such as ISO/IEC 27001, ENS, NIS2, etc.
- Risk assessment and risk management methodologies.
- Security requirements for suppliers and third parties.
Additionally, the following will be considered a plus:
- Certifications such as CISM, CRISC, CISSP, CISA, ISO/IEC 27001 Lead Auditor, or similar.
- Knowledge of operational resilience and business continuity frameworks.
- Experience working in regulated environments or critical infrastructure sectors.
A high level of English proficiency is required.
WHAT DO WE OFFER?
🕑 Hybrid working model and 4 weeks per year of teleworking outside your usual geographical area.
💻 Flexible start and finish times, and intensive working hours Fridays and in summer.
🚀 Personalized career plan development, training and language learning support.
🌍 National and international mobility. Do you come from another country? We can offer you a relocation package.
💰 Competitive compensation with ongoing reviews, flexible compensation and discount on brands.
💪Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financialhealth training, and much more!
⚠️ In our recruitment processes you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through any other process, please write to our team at privacy@gmv.com
❤️We promote equal opportunities in recruitment, and we are committed to inclusion and diversity.
WHAT ARE YOU WAITING FOR? JOIN US
If you have any questions please do not hesitate to contact Pablo Durán Álvarez, in charge of this vacancy.
Full responsibilities and requirements are on GMV's application page.
Apply for this job →Location and market context
This job is based in Tres Cantos, Madrid on a hybrid schedule. Local candidates benefit from being close to GMV's teams and regional hiring market, while the hybrid arrangement offers some flexibility. Confirm the exact in-office expectation and any relocation support with the employer.
About compliance jobs
Compliance programs turn law, regulation, and policy into controls the business can actually run. Demand is strongest where regulatory change, enforcement risk, and new technology intersect. Jobs like this one are typically evaluated against frameworks such as relevant regulatory frameworks, control libraries, and audit and monitoring practices.
How to position yourself for this compliance job
Strong candidates emphasize building and monitoring controls, regulatory mapping, policy and training, and partnering with the business to make compliance practical. In your resume and outreach, tie your experience to how GMV would apply relevant regulatory frameworks, control libraries, and audit and monitoring practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
More GRC jobs: All GRC jobs · Search by category & location