GRC Consultant

We are looking for a motivated and knowledgeable GRC Consultant to join our team in Nicosia, Cyprus, and support our customers in strengthening their Governance, Risk, and Compliance frameworks.

The ideal candidate will contribute to the delivery of consulting projects related to information security governance, risk management, regulatory compliance, business continuity, and information security management systems. The role involves assessing customer environments, identifying gaps, developing policies and procedures, and supporting organizations in achieving and maintaining compliance with regulatory requirements and international standards.

Responsibilities

• Participate in GRC consulting projects related to Information Security Management, Risk Management, Business Continuity, Information Classification, Security Awareness, and Regulatory Compliance
• Conduct gap assessments against applicable standards and regulatory frameworks, including ISO/IEC 27001, ISO 22301, PCI DSS, GDPR, NIS2, and other relevant requirements
• Support the implementation and continuous improvement of Information Security Management Systems (ISMS) and other management systems
• Perform information security and business risk assessments, identify risks and control gaps, and provide practical recommendations for remediation
• Develop and review policies, procedures, standards, risk registers, controls, and other GRC-related documentation
• Conduct interviews and workshops with customer stakeholders to understand business processes, security requirements, and compliance needs
• Prepare high-quality project deliverables, including assessment reports, gap analyses, risk assessments, compliance documentation, and management presentations
• Support customers in preparing for internal and external audits and certification activities
• Monitor developments in cybersecurity regulations, standards, and industry best practices and support their integration into customer projects
• Contribute to the development and standardization of internal GRC methodologies, templates, tools, and consulting practices
• Collaborate with technical cybersecurity teams to ensure that governance and compliance requirements are appropriately translated into technical and organizational controls
• Participate in pre-sales activities, including customer meetings, requirements gathering, project scoping, effort estimation, and preparation of proposals and Statements of Work (SOWs)
• Follow up on project actions and identified issues, collaborating with internal teams and customer stakeholders to support their successful resolution

Requirements

• University degree in IT, Cybersecurity, Computer Science, Risk Management, or a related field, with 2+ years of relevant experience in GRC, information security, cybersecurity consulting, risk management, or compliance
• Experience with standards and frameworks such as ISO/IEC 27001, ISO 22301, PCI DSS, GDPR, NIS2, or similar, combined with a good understanding of risk management, security controls, and cybersecurity best practices
• Strong analytical, problem-solving, communication, presentation, and technical writing skills, with the ability to work effectively with both technical and business stakeholders
• Strong organizational skills, adaptability, and the ability to manage multiple tasks and projects within deadlines.
• Advanced proficiency in English
• Relevant postgraduate studies or certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor, or Lead Implementer will be considered an advantage

Benefits

• Private Health Insurance

• Private Pension Plan

• Training & Development

• Performance Bonus

• Laptop

• Phone - Mobile Plan