Adacom Advanced Internet Applications

Cybersecurity consulting and customized security solutions

GRC Consultant

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeNicosia, Cyprus

About the Job

Requirements

A university degree in IT, Cybersecurity, Computer Science, Risk Management, or a related field, and at least 2 years of relevant experience in GRC, information security, cybersecurity consulting, risk management, or compliance.
Experience with standards and frameworks such as ISO/IEC 27001, ISO 22301, PCI DSS, GDPR, NIS2, or similar, together with an understanding of risk management, security controls, and cybersecurity best practices.
Strong analytical, problem-solving, communication, presentation, and technical writing skills, with the ability to work effectively with technical and business stakeholders.
Strong organizational skills, adaptability, and the ability to manage multiple tasks and projects within deadlines.
Good command of Greek at minimum B2 level, unless the candidate graduated from a Cypriot or Greek educational institution.
Advanced proficiency in English.

Responsibilities

Participate in GRC consulting projects related to Information Security Management, Risk Management, Business Continuity, Information Classification, Security Awareness, and Regulatory Compliance.
Conduct gap assessments against applicable standards and regulatory frameworks, including ISO/IEC 27001, ISO 22301, PCI DSS, GDPR, NIS2, and other relevant requirements.
Support implementation and continuous improvement of Information Security Management Systems (ISMS) and other management systems.
Perform information security and business risk assessments, identify risks and control gaps, and provide practical recommendations for remediation.
Develop and review policies, procedures, standards, risk registers, controls, and other GRC-related documentation.
Conduct interviews and workshops with customer stakeholders to understand business processes, security requirements, and compliance needs.
Prepare project deliverables, including assessment reports, gap analyses, risk assessments, compliance documentation, and management presentations.
Support customers in preparing for internal and external audits and certification activities.
Monitor developments in cybersecurity regulations, standards, and industry best practices and support their integration into customer projects.
Contribute to the development and standardization of internal GRC methodologies, templates, tools, and consulting practices.
Collaborate with technical cybersecurity teams to translate governance and compliance requirements into technical and organizational controls.
Participate in pre-sales activities, including customer meetings, requirements gathering, project scoping, effort estimation, and preparation of proposals and Statements of Work (SOWs).
Follow up on project actions and identified issues, collaborating with internal teams and customer stakeholders to support their resolution.

Desired Qualifications

Relevant postgraduate studies or certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor, or Lead Implementer.

GRC Consultant

Adacom Advanced Internet Applications SA · Nicosia, Cyprus (Hybrid) · Full-time · Posted 2026-08-17

Workplace: hybrid

Description

We are looking for a motivated and knowledgeable GRC Consultant to join our team in Nicosia, Cyprus, and support our customers in strengthening their Governance, Risk, and Compliance frameworks.

The ideal candidate will contribute to the delivery of consulting projects related to information security governance, risk management, regulatory compliance, business continuity, and information security management systems. The role involves assessing customer environments, identifying gaps, developing policies and procedures, and supporting organizations in achieving and maintaining compliance with regulatory requirements and international standards.

Responsibilities

Participate in GRC consulting projects related to Information Security Management, Risk Management, Business Continuity, Information Classification, Security Awareness, and Regulatory Compliance
Conduct gap assessments against applicable standards and regulatory frameworks, including ISO/IEC 27001, ISO 22301, PCI DSS, GDPR, NIS2, and other relevant requirements
Support the implementation and continuous improvement of Information Security Management Systems (ISMS) and other management systems
Perform information security and business risk assessments, identify risks and control gaps, and provide practical recommendations for remediation
Develop and review policies, procedures, standards, risk registers, controls, and other GRC-related documentation
Conduct interviews and workshops with customer stakeholders to understand business processes, security requirements, and compliance needs
Prepare high-quality project deliverables, including assessment reports, gap analyses, risk assessments, compliance documentation, and management presentations
Support customers in preparing for internal and external audits and certification activities
Monitor developments in cybersecurity regulations, standards, and industry best practices and support their integration into customer projects
Contribute to the development and standardization of internal GRC methodologies, templates, tools, and consulting practices
Collaborate with technical cybersecurity teams to ensure that governance and compliance requirements are appropriately translated into technical and organizational controls
Participate in pre-sales activities, including customer meetings, requirements gathering, project scoping, effort estimation, and preparation of proposals and Statements of Work (SOWs)
Follow up on project actions and identified issues, collaborating with internal teams and customer stakeholders to support their successful resolution

Requirements

University degree in IT, Cybersecurity, Computer Science, Risk Management, or a related field, with 2+ years of relevant experience in GRC, information security, cybersecurity consulting, risk management, or compliance
Experience with standards and frameworks such as ISO/IEC 27001, ISO 22301, PCI DSS, GDPR, NIS2, or similar, combined with a good understanding of risk management, security controls, and cybersecurity best practices
Strong analytical, problem-solving, communication, presentation, and technical writing skills, with the ability to work effectively with both technical and business stakeholders
Strong organizational skills, adaptability, and the ability to manage multiple tasks and projects within deadlines
Good command of the Greek language (minimum B2 level), unless the candidate is a graduate of Cypriot or Greek educational institution
Advanced proficiency in English
Relevant postgraduate studies or certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor, or Lead Implementer will be considered an advantage

Benefits

Private Health Insurance
Private Pension Plan
Training & Development
Performance Bonus
Laptop
Phone - Mobile Plan

Apply

Apply at Adacom Advanced Internet Applications SA

About the Company

Adacom Advanced Internet Applications

Cybersecurity consulting and customized security solutions

ADACOM provides security services for financial institutions, telecom operators, governments and large organizations in more than 30 countries in EMEA, offering consulting and customized security solutions that combine vendors and innovative startups. It delivers security operations across major practices—infrastructure security, data governance, governance, risk, compliance, security analytics, PKI and strong authentication—through interdisciplinary teams that design, implement and manage solutions. The company differentiates itself by offering end-to-end consulting, deployment and ongoing advisory across a broad ecosystem of vendors, supported by ISO 9001 and ISO 27001 certifications, a history of large international projects, and a physical presence that includes education and training programs. Its goal is to help customers prevent and manage security threats with practical, certified, and scalable security programs.

Company size: 51-200
Company stage: Not listed
Total funding: Not listed
Headquarters: Athens, Greece
Founded: 1998

Recently Posted Jobs

Explore more opportunities at Adacom Advanced Internet Applications

See more jobs