About the role
GRC Consultant
We’re looking for a GRC Consultant to join our growing team and help organizations navigate the evolving world of cyber regulations and risk management.
In this role, you’ll lead and support end-to-end GRC processes for our clients — from risk assessments to regulatory compliance — while providing expert guidance on cybersecurity and information security best practices.
What you’ll do
*Conduct risk assessments for a variety of clients across industries
- Lead and implement GRC processes, ensuring compliance with standards and regulations (NIS2, GDPR, ISO 27001, etc.)
- Develop and implement information security policies, procedures, and frameworks
- Advise clients on regulatory requirements and build actionable compliance roadmaps
- Perform security assessments across multiple domains, including supply chain and information systems
- Support organizations in meeting privacy and data protection regulations
What we’re looking for
- Bachelor’s degree in a relevant field (Industrial Engineering & Management, Business Administration, Law, or similar)
- Training and/or certifications in GRC, cybersecurity, or information security (CISO, CISM, DPO, CRISC, ISO 27001 Lead Auditor)
- At least 2 year of hands-on experience in GRC, risk management in cybersecurity
- Strong understanding of international cybersecurity regulations and standards
- Proven ability to manage projects and lead risk assessment processes in a team environment
- Analytical thinking, problem-solving skills, and a proactive mindset