GRC Expert – Governance, Risk and Compliance

This is a fully remote position, open to applicants in Greece, +1 more country.

📋 Description

• Assist clients in meeting compliance standards for NIS2, DORA, ISO 27001, GDPR, and other industry-specific frameworks.

• Perform audits and maturity assessments, identify gaps, and formulate remediation strategies.

• Create and update documentation, including information security policies, procedures, and charters.

• Prepare for and provide support during certifications and external audits.

• Execute risk analyses utilizing EBIOS Risk Manager and ISO 27005 methodologies.

• Develop and facilitate risk maps, treatment plans, and monitoring indicators.

• Enhance security governance through committees, dashboards, and reporting to senior management.

• Convert regulatory requirements into architectural specifications in collaboration with cloud and infrastructure architects.

• Assist in the design of landing zones and reference architectures that incorporate compliance.

• Engage in business continuity planning and crisis management drills.

• Prepare technical responses to requests for proposals and deliver presentations to defend those proposals.

• Evaluate and assess clients’ compliance and governance requirements.

• Innovate and improve GRC offerings while creating accelerators.

• Contribute to the organization of the Cybersecurity practice and lead the cyber community.

• Oversee regulatory monitoring for the practice.

⛳️ Requirements

• Master's degree, engineering degree, or equivalent qualification.

• Minimum of 8 years of experience in cybersecurity, with at least 3 years focused on GRC.

• In-depth knowledge of frameworks and standards such as ISO 27001/27002/27005, NIS2, DORA, GDPR, and ANSSI guidelines.

• Proficient in the EBIOS Risk Manager methodology and familiar with ISO 27005.

• Experience in conducting audits and maturity assessments.

• Strong grasp of cloud, infrastructure, network, and IAM architectures.

• Familiarity with cloud security challenges and knowledge of the CIS Benchmarks and CSA CCM frameworks is advantageous.

• Professional proficiency in English.

• ISO 27001 Lead Auditor or Lead Implementer certification is a plus.

• EBIOS Risk Manager, CISM, CISSP, or CRISC certifications are highly regarded.

• Exceptional communication skills, particularly with executive management and Executive Committees.

• Outstanding writing abilities.

• Pragmatic approach, initiative, diplomacy, and strong negotiation skills.

🏝️ Benefits

• Dedicated budget for training and certification.

• Strategic positioning with direct access to decision-makers.

• A collaborative environment where GRC and technical experts work together rather than in silos.

• Opportunities in a growing market where we are making active investments.

• Career development pathway toward becoming a subject-matter expert in the Cybersecurity practice.

• Options for remote work.