GRC Consultant (m/w/d)
Core
GRC Consultant supporting companies in implementing Governance, Risk, and Compliance frameworks to identify, assess, and control risks while ensuring regulatory compliance.
Role type
GRC Consultant
Builds
GRC frameworks, processes, and compliance procedures for IT and security
Domain
IT Security & Compliance
Deliverable
client delivery
Required skills
Risk assessment, gap analysis, GRC framework design, compliance process implementation, policy creation, risk reporting, stakeholder interviews, workshop facilitation
Preferred skills
ISO 27001 familiarity, IT infrastructure experience, CISA/CRISC/ISO 27001 Lead Auditor certification
Technologies
ISO 27001, NIS2, AI Act, NIST
Responsibilities
Conduct risk assessments and gap analyses for clients; Design and implement GRC frameworks and processes; Support compliance processes for NIS2, ISO 27001, AI Act, and NIST; Create governance policies and risk reports for executive leadership; Act as direct client contact; Share threat intelligence with the team.
Seniority
Mid-Senior (5+ years experience)
