Consultant cybersécurité GRC
Core
Define, maintain, and disseminate security governance frameworks; support projects with Security by Design; secure architectures; challenge cloud environments for compliance; integrate security into CI/CD pipelines; manage IT and business risks; oversee regulatory compliance; lead audits and crisis management exercises; drive security awareness culture.
Role type
Senior GRC Consultant (Governance, Risk & Compliance)
Builds
Security governance frameworks, risk management plans, compliance reports, audit findings, security awareness programs
Domain
Cybersecurity, IT Governance, Risk Management, Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Risk analysis, Knowledge of SSI solutions and standards, Cloud compliance (Azure/AWS/GCP), CI/CD security integration (DevSecOps), Regulatory compliance knowledge (ISO 27001/22301, NIST, PCI-DSS), Audit and crisis management planning, Security awareness training
Preferred skills
Certification in security, Engineering degree with security specialization
Technologies
Azure, AWS, GCP, SAST, DAST, IAST, Secrets management tools
Responsibilities
Define and maintain security governance frameworks (PSSI, charters, policies), Support projects with Security by Design and Privacy by Design, Secure on-prem, network, application, data, and cloud architectures, Challenge and define cloud environments for compliance and control, Integrate security into CI/CD and DevSecOps pipelines, Manage IT and business risk assessments and treatment plans, Oversee regulatory compliance and normative standards, Lead audits, BIA, PRA/PCA, tests, and crisis exercises, Conduct and support security awareness and culture initiatives
Seniority
Senior, hands-on IC