GRC Compliance Specialist

Happyrobot.ai · SpainRemotojunior

En corto

▸Especialista en cumplimiento GRC técnico para plataformas de IA en startup de alto crecimiento.
▸Gestiona auditorías (SOC 2, ISO 27001), automatiza evidencia con herramientas como Vanta/Drata y responde a clientes y auditores.
▸Destaca por el enfoque en automatización y colaboración con ingenieros para mantener el sistema siempre listo para auditoría.

Exceptional written and verbal communication in English.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓1–3 años en GRC, auditoría TI o cumplimiento de seguridad.
✓Experiencia comprobada con SOC 2 o ISO 27001 (auditorías completas es un plus).
✓Capacidad para entender controles técnicos (IAM, cifrado, CI/CD, logs en la nube) y explicarlos a no técnicos.
✓Experiencia previa con plataformas de automatización GRC (Vanta, Drata, Secureframe, similares).
✓Comunicación excepcional por escrito y verbal en inglés.
✓Capacidad para liderar procesos de auditoría externa y responder preguntas de clientes sobre seguridad.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

SOC 2ISO 27001VantaDrataSecureframeAWSGCPIAMCI/CDcifrado

¿A quién escribirle en Happyrobot.ai?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

ABOUT HAPPYROBOT HappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don't just communicate through voice and email - they make decisions, take action, and run operations autonomously across entire enterprise systems. Born in Y Combinator (S23) and backed by a16z, Base10, Prysm Capital and Eurazeo with over $150M raised, we power critical operations for global enterprises worldwide. Our platform is battle-tested in the most demanding environments, where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Learn more about our vision in our manifesto. https://www.happyrobot.ai/blog/manifesto ABOUT THE ROLE We are looking for a GRC Specialist to join our Security team. Your mission is to scale our compliance frameworks and ensure we maintain a "continuously audit-ready" state. You will own the day-to-day operations of our GRC platform, manage evidence collection, and act as the primary point of contact for customer security inquiries and external audits. This is a technical GRC role: you won’t just be checking boxes; you will be working with engineers to automate evidence and ensure our security controls are robust and well-documented. WHAT YOU’LL DO - Framework Management: Maintain and improve our compliance posture for SOC 2 Type II and ISO 27001. Assist in the roadmap for future certifications (e.g., HIPAA, GDPR). - GRC Automation: Administer our GRC platform (e.g., Vanta, Drata) to automate evidence collection and monitor control health in real-time. - Audit Coordination: Lead external audit cycles, acting as the main interface between auditors and our internal technical teams. - Customer Trust: Own the security questionnaire process. Build and maintain a "Trust Center" or Knowledge Base to accelerate sales cycles by providing accurate security documentation to prospects. - Risk Management: Conduct internal risk assessments and vendor security reviews to ensure our supply chain meets HappyRobot’s standards. MUST-HAVES - 1–3 years of experience in GRC, IT Audit, or Security Compliance. - Proven experience working with SOC 2 or ISO 27001 (end-to-end audit experience is a plus). - Ability to understand technical security controls (encryption, IAM, CI/CD, cloud logs) and explain them to non-technical stakeholders. - Prior experience with GRC automation platforms (Vanta, Drata, Secureframe, or similar). - Exceptional written and verbal communication in English. You will be drafting auditor-facing evidence and customer-facing security responses. NICE-TO-HAVES - Prior experience in a high-growth SaaS startup. - CISA, CRISC, or similar certifications. - Basic understanding of cloud infrastructure (AWS/GCP). WHY JOIN US? - Join a world-class team of engineers and builders. - Backed by top investors including a16z, Y Combinator, Base10, Prysm Capital and Eurazeo. - Have ownership and autonomy of projects and are encouraged to ship. - Comprehensive Benefits including healthcare, dental, vision coverage. - Competitive salary + equity in a high-growth startup. Our Operating Principles Extreme Ownership We take full responsibility for our work, outcomes, and team success. No excuses, no blame-shifting — if something needs fixing, we own it and make it better. This means stepping up, even when it’s not “your job.” If a ball is dropped, we pick it up. If a customer is unhappy, we fix it. If a process is broken, we redesign it. We don’t wait for someone else to solve it — we lead with accountability and expect the same from those around us. Craftsmanship Putting care and intention into every task, striving for excellence, and taking deep ownership of the quality and outcome of your work. Craftsmanship means never settling for “just fine.” We sweat the deta

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.