GRC Consultant

We are seeking an experienced GRC Consultant to support and advise clients in managing cyber risks, ensuring compliance with industry standards, and implementing robust information security governance frameworks. You will work across multiple sectors, helping clients improve their risk posture through audit readiness, control assessments, policy development, and regulatory compliance.

The ideal candidate will have deep knowledge of security. frameworks (ISO 27001, NIST, CIS), regulatory mandates (GDPR, DORA, PCI DSS), and a strategic approach to enterprise-level governance and risk programs.

Job Responsibilities

• Advise clients on cybersecurity governance, risk management, and compliance frameworks
• Perform risk assessments, control gap analyses, and audits (ISO 27001, SOC 2, etc.)
• Develop and implement information security policies, procedures, and risk registers
• Lead client engagements related to GDPR, DORA, and other regulatory requirements
• Support third-party vendor risk assessments and due diligence activities
• Prepare reports and recommendations for CISO, board, and audit committee presentations
• Contribute to certification readiness and internal audit programs
• Collaborate with technical teams to align risk controls with business strategy

Requirements

Required Skills

• In-depth knowledge of ISO 27001, NIST CSF, GDPR, and risk management frameworks
• Experience performing security risk assessments, internal audits, and compliance reviews
• Strong understanding of cybersecurity controls, regulatory mandates, and business risk alignment
• Excellent client communication, stakeholder management, and reporting skills
• Familiarity with GRC platforms (e.g., RSA Archer, ServiceNow GRC, LogicGate)

Desired Skills

• Certifications such as CISM, CRISC, ISO 27001 Lead Auditor, or similar
• Experience working with financial services, healthcare, or SaaS industries
• Understanding of emerging regulations (e.g., DORA, NIS2, AI Act)
• Cloud compliance knowledge (e.g., CSA CCM, AWS/Azure/GCP compliance)
• Familiarity with SOC 2, PCI DSS, HIPAA frameworks

Benefits

• Competitive salary with performance-based bonus
• Private healthcare & pension scheme
• Hybrid or remote work options
• Ongoing professional development and certification support (CISM, CRISC, ISO Lead Auditor)
• 25+ days annual leave
• Access to cybersecurity conferences and industry events