GOVERNANCE, RISK AND COMPLIANCE MANAGER

Hello! We are CAPGEMINI,We are very lucky to work in a sector that is leading the evolution towards a sustainable and inclusive future. The technology. The catalyst for so many solutions that we need now more than ever.🌏We are 360,000 PEOPLE around the world moving forward together and driven by the same passion.No matter where we are, we can be at home, in the office, a thousand kilometers away from each other, but we are aware that OUR WORK COUNTS.We are looking for a Governance, Risk and Compliance Manager to join our Cyber Security area. In this role, you will lead, coordinate, support, and actively participate in some of our client projects, maintaining a focus on control and management, as well as the identification, assessment, and management of IT and Security risks, primarily through assessment and guidance related to Governance, Risk, and Compliance (GRC) issues. Expected projects within the practice include the development of assessments against known frameworks and standards, as well as the execution of audits from a security standpoint. You will advise and challenge control and mitigation plans from systems, security, and business perspectives, providing support and guidance on best practices within their companies and locations; while developing deep working relationships with Clients, Senior Executives and Managers.💼What will you do in the project?Demonstrate experience in the effective delivery of the complete lifecycle of workforce oriented Governance, Risk and Compliance (GRC) services including; strategy, organizational design, process re-engineering and technology implementation.Facilitate information gathering, requirements analysis and design activities that support actionable roadmaps for our clients as well as functional requirements for GRC solutions implementation.Functional areas and work experience should include; auditing, advisory, governance, risk management, compliance management, security requirements, certification analysis, among others, ensuring that security requirements are met within the scopes defined by the target work.Provide reports to the management team with clear findings, recommendations, and agreed-upon management action plans, derived from projects or services managed.Contribute to the preparation, coordination and execution phases of security audits (NIST, CIS, ISO27001 Controls) from the client's Security perspective.Develop and maintain security support materials (e.g., models, templates, standards, and procedures) that can be utilized to leverage security capabilities in projects and operations.Collaborate with other security teams and security professionals to share best practices and knowledge.Participate in key projects to independently provide security requirements, assess risks, and ensure appropriate risk mitigation measures have been taken.Provide expertise in Information Security policies, standards, and processes.Work closely with the Technology Office, Internal Audit, Risk Management, Information Security Assurance Teams in the Security Group, and other global stakeholders to maintain compliance with Group Security, regulatory, and industry requirements.🔎To feel comfortable in the position, you need to be able to get along well with:Bachelor's degree from an accredited college/university.Minimum 7+ years dedicated to the field of security and risk management in the cybersecurity industry.High level of proficiency in English. Although the position is in Spain, we also work with international teams and clients.Specific knowledge of governance, risk management (IT and Security), auditing (Lines of Defense), IT and Security processes (e.g., Security Policies and Standards, Vulnerabilities, Hardening, DevOps).Ability to interact with and influence senior business leaders to drive change and continuous improvement.Progressive experience in managing multiple projects simultaneously with excellent organizational, analytical, and critical thinking skills.Certifications:Possession of at least 2 or more certifications from the following will be valued: ISO/IEC 27001 Lead Auditor or similar, ITIL, CISM, CISSP, CISA, CRISC, GIAC Certifications (any), CEH/OSCP, CompTIA... We will evaluate all applications. At Capgemini we have a wide range of training, face-to-face, online Certifications, etc. Even if you do not have 100% of the previous requirements, we would love to meet you! 😊