GRC Security Expert

As a GRC Expert at Leadtech, You Will • Develop cybersecurity policies, procedures, and methodologies to maintain an optimal level of security within the company and implement various standards and regulations. • Juggle several projects at once (ISO 27001, vulnerability follow-up, vendor reviews) without letting quality slip, keeping everything aligned with our security policies and the regulations that apply to us (ISO 27001, GDPR, NIS2). • Develop Data Protection & Privacy initiatives • Proactively identify, troubleshoot, and resolve issues to optimize both internal and external processes. • Balance multiple projects without sacrificing quality, aligning your work with brand standards, cultural nuances, and regulatory requirements. • Engage with diverse stakeholders (e.g., product, engineering, and marketing teams) to gather requirements, evaluate options, and develop tools and processes to support our organization’s goals.

At Leadtech, we’ve been redefining digital businesses since 2009, creating innovative online solutions that reach millions of users every month. With a diverse team of over 700 members from 23+ nationalities, we’re united by a passion for creativity and collaboration. We specialize in delivering user-centric experiences across web and mobile platforms, where people can connect with our products like never before. We’re proud of our global reach and committed to fostering an inclusive workplace where every individual contributes to our shared vision of bringing cutting-edge projects to life. Learn more about our journey and mission on our About Us page! About The Role To support our continuous growth, the Security team is expanding to navigate evolving security frameworks, drive data protection audits, and lead strategic data privacy initiatives. If you’re passionate about information security, governance, solving complex problems, collaborating across departments, and driving results, this role is perfect for you! Key responsibilities: As a GRC Expert at Leadtech, You Will • Develop cybersecurity policies, procedures, and methodologies to maintain an optimal level of security within the company and implement various standards and regulations. • Juggle several projects at once (ISO 27001, vulnerability follow-up, vendor reviews) without letting quality slip, keeping everything aligned with our security policies and the regulations that apply to us (ISO 27001, GDPR, NIS2). • Develop Data Protection & Privacy initiatives • Proactively identify, troubleshoot, and resolve issues to optimize both internal and external processes. • Balance multiple projects without sacrificing quality, aligning your work with brand standards, cultural nuances, and regulatory requirements. • Engage with diverse stakeholders (e.g., product, engineering, and marketing teams) to gather requirements, evaluate options, and develop tools and processes to support our organization’s goals. Required skills: We’re looking for someone with a balance of hard and soft skills who can thrive in a dynamic, cross-functional environment. Here’s what we’d love to see: • Degree in Computer Science, Telecommunications, Law or equivalent practical experience. • 1 or 2 years of experience in GRC, compliance, IT auditor, or a related role. • Working knowledge of ISO 27001:2022 (clause structure, Annex A controls, SoA). We are looking for someone with experience as an auditor, consultant, or implementation specialist. • Working knowledge of core data protection concepts (data retention, PIAs, RATs) • Basic familiarity with cloud platforms (AWS, GCP, Azure), enough to understand IAM concepts like least privilege, MFA, key rotation, and orphaned accounts, without needing admin-level expertise • Strong written communication in both English and Spanish (policies and audit deliverables are produced in English, day to day coordination is in Spanish) • Excellent organizational skills, able to track multiple open items (findings, tickets, evidence requests) across different teams without losing the thread • Proactive individual who takes the initiative: capable of following up with teams to gather evidence, identifying overdue deadlines, and driving tasks to completion with minimal supervision. Ability to independently identify gaps or deviations and escalate them in a timely manner, without the need for prior instruction. Desirable • Certification in progress or completed: ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISA, and CISM are viewed favorably. • Exposure to NIS2 or other EU cybersecurity regulation • Familiarity with GRC platforms (e.g. CISO Assistant) or vulnerability management tooling • Prior experience supporting vendor/third-party security assessments Benefits WHY LEADTECH • Diversified app portfolio with millions of active users in a high-growth non-gaming vertical. • Mature data infrastructure: BigQuery, Looker, AppsFlyer, and a proprietary analytics stack for fast decision-making. • Experimentation culture: real autonomy to propose and ship changes in production. • International team, dynamic environment, and the opportunity for direct P&L impact. • Competitive compensation package + benefits (flexible hours, health insurance, training). Growth and career development • At Leadtech, we prioritize your growth. Enjoy a flexible career path with personalized internal training and an annual budget for external learning opportunities. Work-Life balance • Benefit from a flexible schedule with flextime and the option of working full remote or from our Barcelona office. Enjoy free Friday afternoons with a 7-hour workday, plus a 35-hour workweek in July and August so you can savor summer! Comprehensive benefits • Competitive salary, full-time permanent contract, and top-tier private health insurance (including dental and psychological services). • 25 days of vacation plus your birthday off, with flexible vacation options—no blackout days! Unique Perks • If you wish to come, in our office in Barcelona you’ll find it complete with free coffee, fresh fruit, snacks, a game room, and a rooftop terrace with stunning Mediterranean views. • Additional benefits include ticket restaurant and nursery vouchers, paid directly from your gross salary. • Join us in an environment where you’re free to innovate, learn, and grow alongside passionate professionals. At Leadtech, you’ll tackle exciting challenges and be part of a vibrant team dedicated to delivering exceptional user experiences Sounds good? Apply now! We’re looking forward to getting to know you. Equal Employment Opportunity Employer: Leadtech is an Equal Employment Opportunity (EEO) Employer, which means we encourage applications from people with different backgrounds, interests, and personal circumstances. Our team welcomes applicants regardless of their race, gender, age, religion, nationality, sexual orientation, gender identity