# GRC Compliance Specialist

**Company:** [HappyRobot](https://hotfix.jobs/companies/happyrobot)
**Location:** Barcelona, Spain, Madrid, Spain
**Role:** Security Engineering
**Experience:** 1+ years
**Skills:** SOC 2, ISO 27001, HIPAA, GDPR, Vanta, Drata, Secureframe, Encryption, IAM, CI/CD, Cloud Logs, AWS, GCP, Cisa, Crisc
**Posted:** 2026-08-03

> Owns GRC operations, audit coordination, evidence automation, customer security questionnaires, and risk reviews for SOC 2 and ISO 27001 compliance. The role requires 1–3 years of GRC, IT audit, or security compliance experience and familiarity with technical security controls and GRC platforms.

## Job Description

## Responsibilities

- Maintain and improve compliance posture for **SOC 2 Type II** and **ISO 27001**.
- Assist with the roadmap for future certifications, including **HIPAA** and **GDPR**.
- Administer a GRC platform such as **Vanta** or **Drata** to automate evidence collection and monitor control health in real time.
- Lead external audit cycles and serve as the primary interface between auditors and internal technical teams.
- Own the security questionnaire process.
- Build and maintain a Trust Center or knowledge base with accurate security documentation for prospects.
- Conduct internal risk assessments and vendor security reviews.
- Work with engineers to automate evidence collection and ensure security controls are robust and well documented.

## Requirements

- **1–3 years** of experience in GRC, IT audit, or security compliance.
- Experience with **SOC 2** or **ISO 27001**; end-to-end audit experience is a plus.
- Ability to understand technical security controls, including encryption, identity and access management, CI/CD, and cloud logs, and explain them to non-technical stakeholders.
- Experience with GRC automation platforms such as **Vanta**, **Drata**, or **Secureframe**.
- Exceptional written and verbal communication in English.

## Nice-to-haves

- Experience in a high-growth SaaS startup.
- **CISA**, **CRISC**, or similar certification.
- Basic understanding of cloud infrastructure, including **AWS** or **GCP**.

## Compensation and benefits

- Competitive salary and equity in a high-growth startup.
- Healthcare, dental, and vision coverage.

## Similar jobs

- [Platform Security Engineer](https://hotfix.jobs/jobs/e556dd76-0f95-4dfa-9d3d-e476f24057c0) - Supabase - Remote
- [Manager, Security Operations](https://hotfix.jobs/jobs/0a4637da-6072-4ec3-a0a9-8b6d4a412d45) - Vanta - Remote - $178k – $209k/yr
- [Senior Security Engineer, Offensive Security](https://hotfix.jobs/jobs/e6f5289c-9cb8-4a13-b321-e0ecc9a54c96) - Docker - Remote - €119k – €170k/yr
- [Senior Security GRC Analyst](https://hotfix.jobs/jobs/b54fb115-3bb7-4d88-8fdc-b7901d26d90d) - Monarch - Remote - $180k – $215k/yr
- [Security Engineer - Product](https://hotfix.jobs/jobs/d32dc9fa-f31b-4fc4-a7c6-eade39acfb64) - Wiz - Berlin, Germany

**Apply:** https://hotfix.jobs/jobs/4da7c5c5-39a7-4852-9a84-6b9c2949a092
**Canonical:** https://hotfix.jobs/jobs/4da7c5c5-39a7-4852-9a84-6b9c2949a092