GRC Consultant
Core
Implementing an Information Security Management System (ISMS) aligned with ISO/IEC 27001:2022 and Polish cybersecurity regulations for an international energy sector client.
Role type
GRC Consultant (Cybersecurity Governance & Compliance)
Builds
Unified control framework, risk registers, security policies, and compliance documentation for the client's ISMS.
Domain
Cybersecurity Governance, Risk & Compliance (GRC) in the Energy/Utilities sector.
Required skills
ISO/IEC 27001:2022 implementation, NIS2 compliance, Polish Cybersecurity Act (uKSC) knowledge, risk register management, stakeholder workshop facilitation, Third-Party Risk Management (TPRM), incident response documentation, vulnerability management planning.
Preferred skills
Energy/Utilities industry experience, Operational Technology (OT)/ICS understanding, GRC platform experience (Eramba, ServiceNow IRM, OneTrust, Archer, Lansweeper), ISO 27001 Lead Implementer/Auditor, CISM, CRISC, CISA certifications.
Technologies
ISO/IEC 27001:2022, NIS2, Polish Cybersecurity Act (uKSC), Eramba, ServiceNow IRM, OneTrust, Archer, Lansweeper.
Responsibilities
Support ISMS implementation and continuous improvement; develop security policies and governance documentation; build and maintain risk registers; conduct risk assessments and Business Impact Analyses (BIA); map controls to regulatory requirements; coordinate TPRM activities; prepare documentation for internal and external audits.
Seniority
Senior, hands-on IC
