Information Security Technician (GRC, Compliance & Risk)

About the role

An organisation based in Andorra is looking for an Information Security Technician to join its team. The role supports the design, implementation and audit of GRC compliance plans and frameworks, both for the organisation and its assigned clients, so that cybersecurity strategies stay aligned with current Andorran regulations.

Key responsibilities

• Support the creation, updating and dissemination of information security policies, standards and procedures
• Help meet ISO 27001, the Andorran National Scheme, the Andorran Risk Register, Andorran data protection law, GDPR and sector requirements
• Take part in risk analyses, asset registers and treatment plans under supervision
• Gather control evidence and support internal and external audits
• Evaluate suppliers and answer client security questionnaires with the team
• Prepare training and drills, and record incidents and lessons learned

Required profile

• Vocational, university or higher education degree in Computer Engineering, Telecommunications, Computer Science or Cybersecurity; a master's in Cybersecurity, Technology Risk Management or Security Engineering is valued
• More than one year of experience in IT or areas such as networks, systems administration, cloud, identity management, SOC, penetration testing, compliance, internal audit or security
• Catalan and Spanish at native level; English is valued

Required skills

• Knowledge of information security fundamentals
• Notions of ISO 27001, risk management, the Andorran National Scheme, the Andorran Risk Register and data protection (national law and GDPR)

What we offer

• Permanent full-time position
• Hybrid work model based in Andorra
• Participation in an innovative project where you can contribute autonomously

The process involves application screening, a telephone interview, talent and technical interviews, and a final check of the employment history or references.