Sikkerhetsrådgiver GRC
Core
GRC consultant helping Norwegian enterprises manage cyber risk, build governance systems, and ensure regulatory compliance.
Role type
GRC security consultant
Builds
Information security management systems (ISMS), risk assessments, security policies, and compliance frameworks
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Deliverable
client delivery
Required skills
Risk management, compliance, security leadership, knowledge of ISO 27001, NIST CSF, NSM principles, CIS Controls, policy writing, facilitation
Preferred skills
CISM, CRISC, ISO 27001 Lead Auditor certifications, background in audit, risk management, or public administration
Responsibilities
Conduct enterprise-level risk assessments and vulnerability evaluations, establish and develop information security management systems, advise on compliance with regulatory frameworks, develop security policies and guidelines, facilitate workshops and training to strengthen security culture
Seniority
Mid-level to Senior, hands-on consultant
