SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Preply, a unicorn edtech company (Series D, $150M), is seeking a Senior GRC Analyst to join its Cybersecurity team in Barcelona. You'll report to the Director of Security and own the governance, risk, and compliance (GRC) program for a fast-growing global platform serving 100,000+ tutors and learners across 180 countries.
Key responsibilities include: maintaining and improving the risk management framework; leading enterprise risk assessments and tracking Key Risk Indicators (KRIs); managing third-party/vendor risk programs; developing security, AI, and compliance policies in collaboration with Legal, Security, and Data teams; driving SOC 2 Type 2 compliance (with potential expansion to ISO 27001); supporting privacy and data retention initiatives; translating regulatory requirements (GDPR, CCPA, EU AI Act, etc.) into actionable policies; coordinating internal and external audits; championing security culture; and identifying opportunities to automate GRC workflows using AI tools.
You'll work cross-functionally with Legal, Engineering, Security, Product, Finance, and company leadership, serving as a bridge between Cybersecurity and the broader organization.
Required: 5+ years in GRC, risk management, compliance, or cybersecurity (preferably in tech/SaaS). Must-have: SOC 2 implementation experience. Strong background in frameworks (ISO 27001, ISO 27701, PCI DSS) and regulations (GDPR, CCPA, COPPA, EU AI Act). Proven track record in risk assessments, KRIs, and cross-functional stakeholder management. Core competencies: cloud security understanding, ability to translate regulatory requirements into practical policies, effective communication, practical AI tool experience, and ideally GRC/compliance automation tooling familiarity.
Nice-to-have certifications: CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor, CIPM.
Preply offers competitive compensation with equity, relocation support to Barcelona, learning/development budget, mental health support, Gympass wellness access, and the opportunity to impact education globally.
