GRC Cybersecurity Manager
Core
Lead independent GRC consulting projects, managing activities and results within an assigned perimeter for clients.
Role type
Senior GRC Cybersecurity Manager (Consulting)
Builds
Client advisory services, internal management systems, and compliance documentation
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Deliverable
client delivery
Required skills
GRC project management, risk assessment, regulatory compliance analysis, audit coordination, stakeholder management, policy development, cloud security posture management, documentation management
Preferred skills
ISO 27001 full cycle certification experience, TISAX, PCI-DSS, SOC 2 Type II knowledge, GRC platform and compliance automation familiarity, NIS2 or DORA project experience
Technologies
NIST CSF, CIS Controls, NIS2, DORA, GDPR, ISO 27001, ISO 9001, SA8001, CSA CCM, ISO 27017/27018, NIST SP 800-53, CIS Benchmarks (AWS, Azure, GCP)
Responsibilities
Analyze gaps and define remediation paths against NIST CSF, CIS Controls, NIS2, DORA, and GDPR; accompany clients through obtaining and maintaining ISO certifications; evaluate cloud service risks including data residency and supply chain dependencies; support definition and implementation of Cloud Security Posture Management systems; coordinate resources ensuring quality and deadlines; manage direct relationships with client technical and executive stakeholders; oversee internal integrated management systems for ISO certifications; manage documentation, non-conformities, risk treatment plans, and corrective actions; coordinate with internal functions and certification bodies during audits; support the Board in evolving governance and information security policies; monitor regulatory evolution and assess impacts on management systems; draft policies, procedures, executive reports, and project documentation
Seniority
Senior, hands-on IC with strategic client advisory