Back

Senior Information Security GRC Analyst

OneTrustMadrid, Spain
You will be redirected to the main website
Posted on: 27 Sep 2026

Job Description

Customer Security Assurance & Questionnaires Own a high volume of end-to-end completion of customer security questionnaires (CAQs), RFP security sections, and other assurance artifacts (e.g., SIG, CAIQ, custom questionnaires). Provide accurate, consistent, and defensible responses by leveraging internal evidence repositories (SOC reports, ISO certificates, policies, standards, diagrams, pen test summaries, etc.). Partner with internal stakeholders (Sales, Marketing, Customer Success, Security, Engineering, Privacy, Legal, Compliance, Product) to validate responses and resolve gaps.Customer Engagement & Security Discussions Meet with customers and prospects to explain security controls, risk posture, and compliance commitments. Present security topics with confidence and clarity—tailoring depth for technical and non-technical audiences. Support Sales and Customer Success by addressing security objections, clarifying customer audit scope, and enabling procurement cycles.Contract & Security Review Perform security reviews of contracts, DPAs, security addenda, and customer security terms. Identify security requirements, non-standard obligations, and risk areas; propose mitigations and collaborate with Legal and Security leadership on negotiation positions. Track contractual security commitments and help ensure they are operationally feasible and aligned with control coverage.Operational Excellence Improve team efficiency through standardization, playbooks, and continuous refinement of response libraries.Demonstrated ability to manage, prioritize, and execute a high volume of concurrent requests with accuracy and consistency, while meeting SLAs and maintaining quality standards in a fast-paced environment. Contribute to internal readiness by keeping evidence current, identifying control documentation gaps, and recommending process improvements.

Job Overview

Salary:
Not disclosed
JOB TYPE:
Not specified
Experience:
Not mentioned
Job Location:
Madrid, Spain
Job Level:
Not specified
Education:
Graduation
Senior Information Security GRC AnalystOneTrust