[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Delivery Hero jobs](https://jobs.opennash.com/companies/delivery-hero/) · [Search jobs](/search/) Delivery Hero · Barcelona, Spain # Security GRC Engineer Barcelona, Spain Full-time Security Listed on Delivery Hero’s official careers site. Posted October 6, 2026. Check that it is still open and apply there. [Apply on Delivery Hero’s careers site →](https://jobs.smartrecruiters.com/DeliveryHero/744000153766557-security-grc-engineer) [OpenNash Jobs](https://jobs.opennash.com/) / [Delivery Hero](https://jobs.opennash.com/companies/delivery-hero/) / Security GRC Engineer ## Job description Glovo is seeking a proactive Security GRC Engineer to help strengthen our global security posture and navigate a rapidly evolving regulatory environment. In this multifaceted role, you will support compliance frameworks (PCI DSS, ISO 27001, NIS2), internal and external audits, drive risk assessment and remediation, and pioneer security awareness programs within our organization. Acting as a strategic bridge between technical engineering, legal, and business stakeholders, you will translate complex legal and regulatory demands into robust, actionable security controls. The ideal candidate brings deep cybersecurity risk expertise, hands-on experience with GRC tools, and the collaborative mindset needed to foster a security-first culture across Glovo. Be a part of a team where you will: Develop, implement, and maintain security policies and procedures in line with relevant compliance frameworks (e.g., ISO 27001, NIST, PCI DSS, GDPR, NIS2, EU AI Act). Develop, execute and deliver security awareness programs to educate employees on best practices and compliance requirements. Conduct security assessment risks, recommending and implementing mitigation strategies, maintaining a risk register and monitoring the status of remediation plans. Coordinate and respond to customer security inquiries and due diligence questionnaires (e.g., SIG, CAIQ). Review and provide input on contract modifications related to security, data protection, and privacy. Propose, develop and implement processes and tools for continuous monitoring of security monitoring to ensure ongoing adherence to policies. Assist with the end-to-end security certification and re-certification process (such as PCI DSS, ISO 27001, NIS2, among others). Assist with internal assessments to identify gaps, weaknesses, or non-compliance issues within our security controls. Support external and internal audits by preparing documentation and coordinating with auditors, follow ups and findings remediation. Serve as a key liaison between technical teams, legal, internal audit, and business units to ensure a unified approach to security and compliance ## Qualifications You have: BA/BS in Computer Science, Information Systems, or similar field. Professional security certifications (CISSP, CISM, CISA, ISO 27001 Lead Implementer or equivalent). Minimum 5 years of experience in the field or in a related area. Solid understanding and previous experience of security control frameworks (NIST, PCI DSS, GDRP, ISO 27001, NIS2) Hands-on experience with GRC platforms (e.g. RSA Archer, SAP GRC, StandardFusion, ServiceNow, OneTrust, etc). Strong ability to manage and report on multiple projects, prioritizing efforts, managing time effectively, and requiring minimal direction in the execution. Proven problem solving, analytical and investigative skills combined with the ability to develop creative solutions and navigate through ambiguity in a fast-paced, agile environment. Proven team player, collaborating well with others to tackle problems in a team-focused dynamic. Excellent written and communications skills, as well as strong interpersonal and relationship building skills. Experience with compliance in cloud environments (AWS, Azure, GCP) and knowledge of frameworks like the Cloud Controls Matrix (CCM). Experience in risk quantification methodologies (e.g., FAIR) to assess financial and operational impact of security risks. Strong background in designing and delivering effective security awareness programs to foster a security-first culture. ### Nice-to-haves Development skills to automate integrations or processes (e.g. python). Experience with developing, documenting, and testing Business Continuity Plans (BCP) and Disaster Recovery (DR) plans. Working knowledge of the EU AI Act, including its risk-based approach and requirements for high-risk and general-purpose AI models. Familiarity with AI security threats and relevant frameworks (NIST AI RMF, MITRE ATLAS). ## At a glance - Posted by the employer: Oct 6, 2026 - First seen by OpenNash: Oct 12, 2026 - Last checked: Oct 19, 2026 - Listed for: 13 days - Location: Barcelona, Spain - Employment type: Full-time[Apply on Delivery Hero’s careers site →](https://jobs.smartrecruiters.com/DeliveryHero/744000153766557-security-grc-engineer) ## More jobs at Delivery Hero ### [Cyber Defence & Incident Response Engineer (They/She/He)](https://jobs.opennash.com/companies/delivery-hero/jobs/dfc02e76df2491cf149f/) Barcelona, Spain ### [3pl commercial intern Spain](https://jobs.opennash.com/companies/delivery-hero/jobs/f9e12dfd56e20996789a/) Barcelona, Spain ### [Account Manager - Barcelona - Catalan Speaker (They/She/He)](https://jobs.opennash.com/companies/delivery-hero/jobs/50fd71c187ffb17121cd/) Barcelona, Spain ### [Account Manager Regions Spain](https://jobs.opennash.com/companies/delivery-hero/jobs/2a8b4ddd3d4f70099256/) Barcelona, Spain ### [Account Manager Regions Spain (They/She/He)](https://jobs.opennash.com/companies/delivery-hero/jobs/f5d458fb045fa404f881/) Barcelona, Spain ## Similar jobs at other companies ### [SAP Security & GRC Consultant](https://jobs.opennash.com/companies/accenture/jobs/f913eef1585a1c0cbfbb/) Accenture ### [Information Security Manager/GRC Consultant](https://jobs.opennash.com/companies/ntt/jobs/177c080212a11bab047f/) NTT · Birmingham, United Kingdom ### [SAP Security/GRC &IDM](https://jobs.opennash.com/companies/ntt/jobs/44f8b16b7015c84c9a7c/) NTT · Bengaluru, KA, IN, India ### [Security & Compliance Officer (GRC)](https://jobs.opennash.com/companies/siemens-energy/jobs/39bb28198b3fee294f78/) Siemens Energy ### [Staff Security Engineer (AI GRC)](https://jobs.opennash.com/companies/coupang/jobs/c273c3ea9946247ea204/) Coupang · Mountain View OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)