GRC

GRC Consultant

We’re looking for a GRC Consultant to join our growing team and help organizations navigate the evolving world of cyber regulations and risk management.

In this role, you’ll lead and support end-to-end GRC processes for our clients — from risk assessments to regulatory compliance — while providing expert guidance on cybersecurity and information security best practices.

What you’ll do:

*Conduct risk assessments for a variety of clients across industries * Lead and implement GRC processes, ensuring compliance with standards and regulations (NIS2, GDPR, ISO 27001, etc.) * Develop and implement information security policies, procedures, and frameworks * Advise clients on regulatory requirements and build actionable compliance roadmaps * Perform security assessments across multiple domains, including supply chain and information systems * Support organizations in meeting privacy and data protection regulations

What we’re looking for:

* Bachelor’s degree in a relevant field (Industrial Engineering & Management, Business Administration, Law, or similar) * Training and/or certifications in GRC, cybersecurity, or information security (CISO, CISM, DPO, CRISC, ISO 27001 Lead Auditor) * At least 2 year of hands-on experience in GRC, risk management in cybersecurity * Strong understanding of international cybersecurity regulations and standards * Proven ability to manage projects and lead risk assessment processes in a team environment * Analytical thinking, problem-solving skills, and a proactive mindset