Consultor/a GRC (Governance, Risk & Compliance)
Core
GRC consultant supporting regulatory transformation, risk management, and cybersecurity projects for highly regulated organizations across financial and payment sectors.
Role type
Mid-level GRC consultant (Governance, Risk & Compliance)
Builds
Regulatory compliance frameworks, risk management processes, and operational resilience capabilities for clients
Domain
Financial services, cybersecurity, and regulatory compliance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Regulatory compliance analysis, technological risk assessment, third-party risk analysis, gap analysis against regulatory frameworks, policy and procedure development, IT risk management process design, operational resilience program collaboration, critical supplier evaluation, executive reporting
Preferred skills
ISO 27001, ISO 22301, NIST, DORA, NIS2, GDPR, EBA Guidelines, PSD2/PSD3, MiFID II, Solvency II, CRA, IA Act, SWIFT CSP, PCI DSS, payment schemes, financial market infrastructure, digital banking platforms, fintech
Technologies
ISO 27001, ISO 22301, NIST, DORA, NIS2, GDPR, EBA Guidelines, PSD2, MiFID II, Solvency II, CRA, IA Act, SWIFT CSP, PCI DSS
Responsibilities
Participate in regulatory compliance and adequacy projects, perform technological, cybersecurity, and third-party risk analyses, execute gap analyses against regulatory frameworks, develop policies and control frameworks, design and implement IT risk management processes, collaborate on operational resilience and business continuity programs, evaluate critical suppliers and supply chain risks, prepare documentation for audits and regulators, create executive dashboards and reports, participate in crisis simulation and resilience testing
Seniority
Mid-level, hands-on IC
