GRC Compliance Analyst

Lully

GRC Analyst managing compliance frameworks for AI startup HappyRobot in Spain. Ensuring audit readiness and automating security processes with strong collaboration between teams.

Posted 4/30/2026full-timeMadrid • 🇪🇸 SpainMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Framework Management: Maintain and improve our compliance posture for SOC 2 Type II and ISO 27001. Assist in the roadmap for future certifications (e.g., HIPAA, GDPR).
GRC Automation: Administer our GRC platform (e.g., Vanta, Drata) to automate evidence collection and monitor control health in real-time.
Audit Coordination: Lead external audit cycles, acting as the main interface between auditors and our internal technical teams.
Customer Trust: Own the security questionnaire process. Build and maintain a 'Trust Center' or Knowledge Base to accelerate sales cycles by providing accurate security documentation to prospects.
Risk Management: Conduct internal risk assessments and vendor security reviews to ensure our supply chain meets HappyRobot’s standards.

Requirements

What you’ll need

1–3 years of experience in GRC, IT Audit, or Security Compliance.
Proven experience working with SOC 2 or ISO 27001 (end-to-end audit experience is a plus).
Ability to understand technical security controls (encryption, IAM, CI/CD, cloud logs) and explain them to non-technical stakeholders.
Prior experience with GRC automation platforms (Vanta, Drata, Secureframe, or similar).
Exceptional written and verbal communication in English. You will be drafting auditor-facing evidence and customer-facing security responses.

Benefits

Comp & perks

Top-Tier Compensation - Competitive salary + equity in a high-growth startup
Opportunity to work at a high-growth AI startup, backed by top investors.
Ownership & Autonomy - Take full ownership of projects and ship fast.
Work With the Best - Join a world-class team of engineers and builders

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

GRCIT AuditSecurity ComplianceSOC 2ISO 27001encryptionIAMCI/CDcloud logsrisk assessments

Soft Skills

communicationwritten communicationverbal communicationstakeholder engagementleadership

Certifications

SOC 2 Type IIISO 27001HIPAAGDPR