A

ADVENS

European cybersecurity firm delivering MDR services

GRC Consultant

Risk, Regulatory & Legal AdvisoryConfirmed live in the last 24 hours
Full-timeBilbao, Biscay, SpainNo salary listed

About the Job

Requirements

  • A university degree in Computer Engineering, Telecommunications, or a similar field.
  • Approximately 3–5 years of experience in GRC consulting, technology risk, auditing, or regulatory compliance.
  • Participation in projects for financial institutions, insurers, or payment service companies.
  • Experience preparing reports, procedures, and compliance documentation.

Responsibilities

  • Participate in regulatory compliance and regulatory-alignment projects.
  • Perform technology, cybersecurity, and third-party risk analyses.
  • Conduct gap analyses against regulatory frameworks and international standards.
  • Develop policies, procedures, methodologies, and control frameworks.
  • Design and implement information and communication technology risk-management processes.
  • Collaborate on operational-resilience and business-continuity programs.
  • Participate in assessments of critical suppliers and supply-chain risks.
  • Prepare documentation for audits, regulators, and risk committees.
  • Develop dashboards and executive reports for Risk, Compliance, Security, and Internal Audit functions.
  • Collaborate on crisis-simulation exercises and operational-resilience testing.

Desired Qualifications

  • Knowledge or experience with ISO 27001, ISO 22301, NIST, DORA, NIS2, the General Data Protection Regulation, EBA Guidelines on ICT and Security Risk Management, EBA Guidelines on Outsourcing Arrangements, ECB Cyber Resilience Oversight Expectations, PSD2 or PSD3, MiFID II, Solvency II, EBA directives, CRA, or the AI Act.
  • Experience or knowledge of the SWIFT Customer Security Programme, PCI DSS, Visa or Mastercard payment schemes, financial-market infrastructures, electronic and digital banking services, or payment and fintech platforms.
  • ISO 27001 Lead Auditor certification.
  • ISO 27001 Lead Implementer certification.
  • CRISC certification.
  • CISM certification.
  • CISSP certification.
  • ISO 22301 Lead Auditor certification.
  • English proficiency.

About the Company

ADVENS

European cybersecurity firm delivering MDR services

Advens provides comprehensive cybersecurity services in Europe using a Security-as-a-Service model that covers strategy, governance, auditing, integration, and ongoing managed support. Its flagship offering, mySOC, is a 24/7 Managed Detection and Response service built on an open XDR platform, complemented by a CERT, compliance advisory (GDPR and NIS2), and protection for cloud and OT environments. The company differentiates itself with a large European team of 600+ specialists and a strong social-impact mission through Advens for People and Planet, which funds education, inclusion, and sustainability projects and opens ownership to employees and impact investors. Its goal is to become a leading European cybersecurity provider by delivering practical, enterprise-grade protection while growing its geographic footprint and sustaining its social initiatives.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Lille, France
Founded
2000

Recently Posted Jobs

Explore more opportunities at ADVENS

See more jobs