CAREERS & OPPORTUNITIES
Passionate about cybersecurity? So are we.
We are looking for talented, motivated professionals eager to grow in a dynamic, flexible environment aligned with modern ways of working. Build impactful projects free from unnecessary bureaucracy.
Open Opportunities
Available Positions
Barcelona / MadridFull Time · Hybrid ModelActive Opening
Cybersecurity Senior Consultant (GRC) - BCN / MAD
Are you interested in helping organizations establish and strengthen their security programs through solid governance, risk management, and regulatory compliance? At cyber& we are seeking a Senior Cybersecurity Consultant to help our clients design, implement, and maintain effective security frameworks.
ISO 27001ENSNIS2GDPRPCI DSS+5 years exp.Hybrid
Responsibilities
- •Assist in cybersecurity risk evaluations and assessments, delivering clear analyses and actionable reports for leadership decision-making.
- •Collaborate on designing, updating, and documenting security policies, standards, and controls aligned with ISO 27001, NIST, ENS, PCI DSS, GDPR, and other key standards.
- •Participate in internal compliance audits and provide technical support during official external accreditation audits.
- •Facilitate security awareness sessions and stakeholder communication across organization tiers to foster a proactive defense culture.
- •Contribute to identifying and cataloging compliance gaps, formulating remediation roadmaps and tracking closure metrics.
- •Stay up to date on evolving regulatory requirements, emerging frameworks, and modern GRC methodologies.
- •Support executive briefing preparation and steering committee reporting for clients and stakeholders.
Requirements
- •University degree in Computer Engineering, Telecommunications, Cybersecurity, Business Administration, or related field.
- •Minimum 5 years in cybersecurity, with at least 4 years focused on risk management, regulatory compliance, or security audits.
- •Practical knowledge of security frameworks and mandates including ISO 27001, NIST, ENS, GDPR, PCI DSS, or equivalent.
- •Proficiency in tooling for compliance workflows, risk dashboards, audit evidence tracking, and executive technical reporting.
- •Advanced level of English and Spanish, both verbal and written. Knowledge of Catalan is a valued asset.
- •Strong analytical thinking, proactive communication, team mindset, results orientation, and commitment to continuous improvement.
Valued Assets
- •Postgraduate studies in cybersecurity, engineering, technology law, or related disciplines.
- •Solid background in management and compliance frameworks (ISO 27001, NIST, GDPR, ENS).
- •Recognized GRC or security certifications (e.g. ISO 27001 Lead Implementer/Auditor, CRISC, CISSP Associate).
- •Experience or active interest in security controls auditing and consulting engagements.
What We Offer
- ✓Competitive compensation package aligned with your qualifications and experience.
- ✓38-hour work week (summer compensation reduction) with flexible working hours.
- ✓Hybrid working model (2-3 remote days per week depending on project requirements).
- ✓Flexible Remuneration Program: transit pass, meal vouchers, nursery checks.
- ✓Dynamic, appealing work environment focused on long-term stability and professional growth.
- ✓Continuous training, corporate backing for recognized industry certifications, and real technical challenges.
- ✓Collaborative, high-performing team culture with clear pathways for career progression.
Send your CV directly to our recruiting team: rrhh@cyberand.com
BarcelonaFull Time · Hybrid ModelActive Opening
Cybersecurity Consultant (GRC) - BCN
Are you interested in helping organizations establish and strengthen their security programs through solid governance, risk management, and regulatory compliance? At cyber& we are looking for a Cybersecurity Consultant specialized in GRC for our Barcelona office to support clients in designing, implementing, and maintaining effective security frameworks.
ISO 27001NISTENSGDPRPCI DSS+4 years exp.Hybrid
Responsibilities
- •Support cybersecurity risk assessments and management, producing clear analyses and actionable reports for decision-making.
- •Collaborate in implementing, reviewing, and maintaining security policies, controls, and procedures aligned with frameworks such as ISO 27001, NIST, ENS, PCI DSS, GDPR, and others.
- •Participate in internal and external compliance audits, gathering evidence and coordinating with teams to remediate findings.
- •Facilitate cybersecurity communication and training across organizational levels to foster a strong security culture.
- •Contribute to gap analysis and documentation, proposing improvement and follow-up plans.
- •Stay up to date with regulatory updates, industry best practices, and trends in GRC.
- •Assist in preparing executive reports and presentations for clients and key stakeholders.
Requirements
- •University degree in Computer Engineering, Telecommunications, Cybersecurity, Business Administration, or a discipline related to governance and risk management.
- •Minimum 4 years of experience in cybersecurity, with at least 2 years in risk management, regulatory compliance, or security audit roles.
- •Hands-on knowledge of security frameworks and regulations such as ISO 27001, NIST, ENS, GDPR, PCI DSS, or similar.
- •Proficiency in tools for compliance management, audits, risk monitoring, and technical reporting.
- •Advanced level of Spanish and English, both spoken and written. Knowledge of Catalan is a valued asset.
- •Strong analytical, effective communication, teamwork, results-oriented mindset, and continuous improvement proactivity.
Valued Assets
- •Education in cybersecurity, engineering, technology law, or related fields.
- •Knowledge of management and compliance frameworks (ISO 27001, NIST, GDPR, ENS).
- •Risk analysis skills and collaborative teamwork.
- •Experience or strong interest in security controls and audits.
- •GRC or security certifications (e.g., ISO 27001 Lead Implementer/Auditor, CRISC, CISSP Associate).
- •Good verbal and written communication skills in Spanish and English. Catalan is desirable.
What We Offer
- ✓Competitive salary commensurate with your experience and profile.
- ✓Flexible schedule and reduced summer working hours.
- ✓Hybrid model (2-3 remote work days per week, depending on project needs) with occasional visits to client sites.
- ✓Flexible remuneration program: transport, meal vouchers, kindergarten vouchers.
- ✓Attractive, dynamic work environment where we foster long-term professional and personal growth.
- ✓Continuous training, support for recognized industry certifications, and real technical challenges.
- ✓Excellent professional environment, collaborative team, and long-term career growth opportunities.
Send your CV directly to our recruiting team: rrhh@cyberand.com
Open Application
Don’t see a role matching your exact profile?
We are always eager to connect with great talent. Send us your resume for future opportunities.