IT Risk & Compliance Specialist

Role Overview

• Compliance Monitoring & Reporting: Continuously monitor compliance with ISMS requirements and relevant standards.
• Audit Oversight: Oversee the planning, coordination, and execution of internal and external ISMS audits.
• Risk Management: Collaborate on the information security risk management plan.
• Vendor & Third-Party Risk Management: Conduct security due diligence for new vendors.
• Policy & Documentation Management: Manage the ISMS policy lifecycle.
• Service Operations Support: Respond to client Due Diligence Questionnaires (DDQs).
• Security Awareness: Collaborate on the development and delivery of security awareness training programmes.

Requirements

• 5+ years of experience in IT compliance, information security governance, or GRC roles.
• Deep working knowledge of ISO 27001:2022 and SOC 2 frameworks.
• Hands-on experience with certification and audit cycles.
• Experience with GRC platforms (Vanta experience is a strong plus).
• Solid understanding of risk management methodologies (ISO 27005, Magerit, or equivalent).
• Familiarity with GDPR and the EU AI Act.
• Experience managing vendor security due diligence and third-party risk assessments.
• Strong documentation and policy-writing skills.
• Excellent English communication skills; Spanish is a plus.

Benefits

• A high-impact role in a growing compliance function with direct visibility to executive leadership.
• The opportunity to shape and mature the ISMS of a globally recognised AI and data analytics company.
• Collaboration with a small, focused team that values quality over throughput and structured operating principles.
• An environment where compliance is recognised as a strategic business enabler.