Consulente Cybersecurity Governance
Core
Support the CISO in defining, implementing, and monitoring information security strategy, risk management, compliance, and awareness.
Role type
Cybersecurity Governance, Risk & Compliance (GRC) Consultant
Builds
Security policies, risk mitigation plans, compliance reports, and governance documentation
Domain
Cybersecurity, Risk Management, Regulatory Compliance
Deliverable
dashboards & analysis
Required skills
Cybersecurity GRC strategy, Risk assessment, Compliance auditing, Policy development, Third-party risk management, Incident response coordination, KPI definition, Stakeholder communication
Preferred skills
CISO support experience, CISM/CISSP/CISA certification, ISO 22301 knowledge, DORA regulation knowledge
Technologies
ISO/IEC 27001, NIST CSF, NIS2, GDPR, ISO 22301, DORA
Responsibilities
Support CISO in defining and updating security strategies and policies; Contribute to cyber risk management and mitigation planning; Ensure compliance with standards (ISO 27001, NIS2, GDPR); Support audit, assessment, and gap analysis activities; Define and monitor security KPIs and metrics; Support third-party and supplier security management; Contribute to incident response and business continuity processes; Collaborate with IT, legal, and business functions; Promote security awareness initiatives; Maintain governance documentation.
Seniority
Mid-level, hands-on IC