GRC CONSULTANT MADRID (Hybrid position)

Location: Madrid Emilio Vargas, Spain

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.

Thales Spain requires a specialised support service for regulatory compliance, risk management, and cybersecurity governance. Act as a consultant, developing governance, risk management and regulatory compliance advisory projects, potentially leading their development, while expanding your knowledge of other applicable regulatory frameworks (NIST CSF, ISO 27001, ENS, ISO 22301, GDPR, PCI DSS, etc.) and evolving towards a senior role.

Job Responsabilities:

• Defining and validating assessment and audit scopes.
• Reviewing technical documentation, policies, regulations and procedures. Interviewing responsible persons for security measures and controls.
• Reviewing and validating evidence for assessments and audits.
• Consulting and advising on compliance with information security standards and regulations.
• Developing reports and deliverables.

What we need from you:

• Senior consultant with at least 5 years of experience
• Ability to analyse and synthesise information
• Strong interpersonal and communication skills
• Proactivity and autonomy
• Critical thinking skills Teamwork
• Commitment to continuous improvement
• A higher technical degree (in engineering or a similar subject), preferably in IT or telecommunications.
• Knowledge of cybersecurity in general.
• Experience of Governance, Risk Management and Compliance (GRC) in relation to frameworks such as PCI DSS, NIST CSF, ISO 27001, ENS, ISO 22301, NIS2 and DORA.
• Knowledge of technological cybersecurity, and experience in designing and implementing projects for deploying cybersecurity technologies. At least three years' experience in cybersecurity.
• In hybrid mode.

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!