Security GRC Engineer

Delivery Hero
Barcelona
Workplace: HybridFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsEducation: bachelorsSkills: ["Problem-solving","Analytical","Investigative","Collaboration","Communication"]

Support security governance, risk, and compliance across global frameworks such as ISO 27001, PCI DSS, NIS2, GDPR, and related requirements. Own security policies and awareness programs, manage risk assessments and remediation tracking, and coordinate audits and certifications (e.g., PCI DSS/ISO 27001/NIS2). Serve as a key liaison between engineering, legal, internal audit, and business teams, translating regulatory obligations into actionable security controls while working with GRC tools and cloud security controls.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Delivery Hero
Delivery Hero
1 day ago

Security GRC Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 12 hours agoStatus: Live

Job Summary

Support security governance, risk, and compliance across global frameworks such as ISO 27001, PCI DSS, NIS2, GDPR, and related requirements. Own security policies and awareness programs, manage risk assessments and remediation tracking, and coordinate audits and certifications (e.g., PCI DSS/ISO 27001/NIS2). Serve as a key liaison between engineering, legal, internal audit, and business teams, translating regulatory obligations into actionable security controls while working with GRC tools and cloud security controls.
Location: Barcelona
Workplace: Hybrid
Employment Type: Full time · Permanent
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Develop, implement, and maintain security policies and procedures aligned with relevant compliance frameworks (e.g., ISO 27001, NIST, PCI DSS, GDPR, NIS2, EU AI Act).
  • •Conduct security risk assessments, maintain a risk register, and track remediation plans.
  • •Coordinate customer security inquiries and due diligence questionnaires (e.g., SIG, CAIQ), and review security/data/privacy contract modifications.
  • •Propose and implement processes/tools for continuous monitoring to ensure ongoing policy adherence.
  • •Support internal/external audits and end-to-end security certification and re-certification processes, preparing documentation and coordinating with auditors.

Key Requirements

  • •BA/BS in Computer Science, Information Systems, or a similar field.
  • •Professional security certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer (or equivalent).
  • •Minimum 5 years of experience in security or a related area.
  • •Strong understanding of security control frameworks including NIST, PCI DSS, GDPR, ISO 27001, and NIS2.
  • •Hands-on experience with GRC platforms (e.g., RSA Archer, SAP GRC, StandardFusion, ServiceNow, OneTrust).
Experience:5+ yearsCybersecurityGRCCloud securityAuditsSecurity compliance
Education:Bachelor's
Skills:Problem-solvingAnalyticalInvestigativeCollaborationCommunication
Certifications:CISSPCISMCISAISO 27001 Lead Implementer
Languages:English
Tech Stack:ISO 27001NISTPCI DSSGDPRNIS2EU AI ActGRCRSA ArcherSAP GRCStandardFusionServiceNowOneTrustAWSAzureGCPCloud Controls Matrix (CCM)FAIRPythonNIST AI RMFMITRE ATLAS

Company Brief

Delivery Hero
Global online food-ordering and local delivery platform operating multiple regional brands (e.g., Foodpanda, Glovo, Talabat) across 50–70+ countries, supplying food and quick-commerce deliveries via marketplace and logistics services.
Industry: Online Marketplaces
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Berlin, Germany
Founded: 2011
Glassdoor
Glassdoor: 3.4
WebsiteLinkedInGlassdoor