Consultor/a GRC Bilbao
Core
GRC consultant supporting regulatory transformation, risk management, and cybersecurity projects for highly regulated organizations across financial and payment sectors.
Role type
GRC Consultant (Regulatory, Risk, Cybersecurity)
Builds
Compliance frameworks, risk management processes, and operational resilience capabilities for clients.
Domain
Financial Services / Cybersecurity / Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Regulatory compliance analysis, technological risk assessment, cybersecurity risk analysis, third-party risk management, gap analysis against regulatory frameworks, policy and procedure development, IT risk management process design, operational resilience planning, critical supplier evaluation, executive reporting
Preferred skills
SWIFT CSP, PCI DSS, payment schemes (Visa, Mastercard), financial market infrastructure, electronic banking platforms, fintech
Technologies
ISO 27001, ISO 22301, NIST, DORA, NIS2, GDPR, EBA Guidelines, ECB CROE, PSD2/PSD3, MiFID II, Solvency II, CRA, IA Act
Responsibilities
Participate in regulatory compliance and adequacy projects; Perform technological, cybersecurity, and third-party risk analyses; Execute gap analyses against regulatory frameworks; Develop policies, procedures, and control frameworks; Design and implement IT risk management processes; Collaborate on operational resilience and business continuity programs; Evaluate critical suppliers and supply chain risks; Prepare documentation for audits and regulators; Create executive dashboards and reports; Participate in crisis simulation and resilience testing.
Seniority
Mid-level (3-5 years experience)
