Privacy and Information Security Consultant

Privacy and Information Security Consultant If you believe that cybersecurity and privacy are much more than just regulations and audits, and you are passionate about being at the forefront of digital regulation... GMV is the place for you!

We are expanding our Privacy, Security and Digital Governance Consulting team, where we work on cutting-edge projects related to privacy, information security, data governance and AI governance for clients from different industries.

In this team, you will have the opportunity to help organizations comply with regulations, reduce risks, and define innovative governance models that will shape the digital future.

We like to get straight to the point and tell you what you won’t find online. To learn more about us, visit GMV

WHAT CHALLENGE WILL YOU FACE?

You will be able to develop your professional career within the security, privacy, and governance consulting team, performing tasks such as :

Drafting policies, procedures, and compliance plans in privacy, information security, and AI governance.

Identifying gaps and risks in privacy, security, data, and AI governance, and proposing technical, legal, and procedural solutions.

️ Conducting compliance analysis with GDPR, ENS, ISO 27000, and other international frameworks.

Performing impact assessments and risk analyses (DPIA, MAGERIT, PILAR, etc.).

Participating in AI governance initiatives following the European AI Act and reference frameworks such as NIST AI RMF and ISO 42001.

Advising on data governance in accordance with frameworks and regulations such as the Data Governance Act, Data Act, and UNE standards.

WHAT DO WE NEED IN OUR TEAM?

For this position, we are looking for profiles with a background in Data Protection, Telecommunications Law, Engineering, or similar , and experience in :

Advanced knowledge of privacy (GDPR, DPIA, privacy controls, cloud privacy).

️ Experience in information security and reference standards (ENS, ISO 27000, NIST, etc.).

Drafting policies, compliance plans, and conducting security and privacy risk analyses.

️ Knowledge of legislation and reference frameworks in AI (European AI Act, NIST AI RMF, ISO 42001) and in data governance (DGA, DA, UNE standards).

Additionally, we highly value :

️ Experience with advanced privacy standards (ISO 27701, NIST Privacy Framework).

Knowledge of risk analysis methodologies (MAGERIT, PILAR, or others).

Strong client-facing skills, communication, and teamwork.

WHAT DO WE OFFER?

Hybrid work model and 8 weeks of remote work per year outside your usual geographic area.

Flexible working hours and intensive workdays on Fridays and during summer.

Personalized career development plan , continuous training, and language learning support.

National and international mobility . Coming from another country? We offer a relocation package.

Competitive compensation , flexible benefits, and brand discounts.

Wellbeing program : medical, dental and accident insurance; free fruit and coffee; training on physical, mental, and financial health, and much more.

️ Commitment to equal opportunities , inclusion, and diversity.

WHAT ARE YOU WAITING FOR? JOIN US!

If you have any questions, please contact Clara Sánchez Lobato , responsible for this vacancy.

#J-18808-Ljbffr