GRC Consultant

GRC Consultant 

We’re looking for a GRC Consultant to join our growing team and help organizations navigate the evolving world of cyber regulations and risk management.

In this role, you’ll lead and support end-to-end GRC processes for our clients — from risk assessments to regulatory compliance — while providing expert guidance on cybersecurity and information security best practices.

What you’ll do:

*Conduct risk assessments for a variety of clients across industries
* Lead and implement GRC processes, ensuring compliance with standards and regulations (NIS2, GDPR, ISO 27001, etc.)
* Develop and implement information security policies, procedures, and frameworks
* Advise clients on regulatory requirements and build actionable compliance roadmaps
* Perform security assessments across multiple domains, including supply chain and information systems
* Support organizations in meeting privacy and data protection regulations

What we’re looking for:

* Bachelor’s degree in a relevant field (Industrial Engineering & Management, Business Administration, Law, or similar)
* Training and/or certifications in GRC, cybersecurity, or information security (CISO, CISM, DPO, CRISC, ISO 27001 Lead Auditor)
* At least 2 year of hands-on experience in GRC, risk management in cybersecurity
* Strong understanding of international cybersecurity regulations and standards
* Proven ability to manage projects and lead risk assessment processes in a team environment
* Analytical thinking, problem-solving skills, and a proactive mindset