GRC Consultant
About the job
- A university degree in Computer Engineering, Telecommunications, or a similar field.
- Approximately 3–5 years of experience in GRC consulting, technology risk, auditing, or regulatory compliance.
- Participation in projects for financial institutions, insurers, or payment service companies.
- Experience preparing reports, procedures, and compliance documentation.
- Participate in regulatory compliance and regulatory-alignment projects.
- Perform technology, cybersecurity, and third-party risk analyses.
- Conduct gap analyses against regulatory frameworks and international standards.
- Develop policies, procedures, methodologies, and control frameworks.
- Design and implement information and communication technology risk-management processes.
- Collaborate on operational-resilience and business-continuity programs.
- Participate in assessments of critical suppliers and supply-chain risks.
- Prepare documentation for audits, regulators, and risk committees.
- Develop dashboards and executive reports for Risk, Compliance, Security, and Internal Audit functions.
- Collaborate on crisis-simulation exercises and operational-resilience testing.
- Knowledge or experience with ISO 27001, ISO 22301, NIST, DORA, NIS2, the General Data Protection Regulation, EBA Guidelines on ICT and Security Risk Management, EBA Guidelines on Outsourcing Arrangements, ECB Cyber Resilience Oversight Expectations, PSD2 or PSD3, MiFID II, Solvency II, EBA directives, CRA, or the AI Act.
- Experience or knowledge of the SWIFT Customer Security Programme, PCI DSS, Visa or Mastercard payment schemes, financial-market infrastructures, electronic and digital banking services, or payment and fintech platforms.
- ISO 27001 Lead Auditor certification.
- ISO 27001 Lead Implementer certification.
- CRISC certification.
- CISM certification.
- CISSP certification.
- ISO 22301 Lead Auditor certification.
- English proficiency.
About the company
Advens provides a full range of cybersecurity services across Europe, offering Security-as-a-Service that covers strategy, governance, auditing, integration, and ongoing managed support. Its core offering is mySOC, a 24/7 Managed Detection and Response service built on an open XDR platform to monitor, detect, and respond to threats, along with CERT, GDPR/NIS2 compliance advisory, and OT/cloud security. The company differentiates itself with a strong European footprint of over 600 specialists and a social-impact mission through Advens for People and Planet, channeling funds to education, inclusion, and sustainability and sharing ownership with employees and impact investors. Its goal is to become a major European cybersecurity player by delivering practical, enterprise-grade protection and governance while expanding its footprint and maintaining its commitment to social impact.
Company Size
501-1,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Lille, France
Founded
2000
Get referred to ADVENS
See people who can refer or advise you
Simplify's Take
What believers are saying
- Advens launched SOC Triad on February 25, 2026, targeting digital-sovereignty buyers.
- June 2026 CERT bulletins cite actively exploited vulnerabilities, strengthening demand for response services.
- The 2025-2026 threat report emphasizes AI-driven attacks, boosting demand for advisory and managed defense.
What critics are saying
- HarfangLab and Gatewatcher partnerships expose Advens to vendor dependence if either weakens.
- CybelAngel’s January 2026 alliance intensifies competition in external attack-surface security.
- If mySOC loses differentiation, sovereign European MDR buyers migrate to larger platforms by 2027.
What makes ADVENS unique
- Advens’ 2026 SOC Triad bundles mySOC, HarfangLab EDR, and Gatewatcher NDR.
- Its 2025-2026 CERT reports combine hundreds of incidents with SOC, Audit, and Architecture teams.
- Advens keeps employee ownership and the 2021 impact fund, aligning retention with mission.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Flexible Work Hours
- Hybrid Work Options
- Training Programs
- Professional Development Budget
- Phone/Internet Stipend