GRC Security Consultant

GRC Security Consultant – GRCSC_2.26

SYNTAX IT Group is seeking a Cyber Security Consultant to strengthen its Professional Services team. The successful candidate will support clients in developing and improving their Governance, Risk, and Compliance (GRC) frameworks, executing security initiatives, and ensuring alignment with applicable industry standards and regulatory requirements.

Key Responsibilities

Governance and Information Security

• Collaborate with stakeholders to assess and improve the organization's security posture and GRC activities.
• Act as a Virtual Chief Information Security Officer (vCISO), where required.
• Establish and maintain Information Security Management Systems (ISMS) or components thereof in accordance with standards such as ISO/IEC 27001.
• Create, review, and maintain information security documentation, including policies, standards, procedures, and related documentation.
• Design and deliver security awareness training.
• Gather information regarding existing security controls and assist in defining and monitoring relevant security KPIs.

Risk Management

• Review or implement Security Assessment Frameworks.
• Conduct security assessments against defined scopes or across entire organizations.
• Review or implement Third-Party Security Assessment Frameworks.
• Conduct third-party risk assessments, both remotely and on-site.
• Identify, evaluate, and document information security risks and associated controls.

Compliance

• Conduct gap assessments against relevant industry standards, including:
• ISO/IEC 27001
• ISO 22301
• PCI DSS
• Other applicable security standards and frameworks
• Conduct assessments against relevant legislation and regulatory requirements, including:
• NIS2
• DORA
• GDPR
• Develop remediation and compliance roadmaps toward certification or regulatory compliance.
• Liaise with internal and external stakeholders to collect, analyze, and present information effectively.

Skills and Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent professional experience.
• Master's degree in a relevant field will be considered an advantage.
• 2–3 years of professional experience in Governance, Risk, and Compliance or related information security domains, particularly in:
• Information security documentation and security awareness
• Cyber risk management
• Information security management systems
• Third-party risk management
• Regulatory and compliance assessments
• Practical knowledge of relevant ISO standards, including:
• ISO/IEC 27001
• ISO 22301
• ISO 31000
• ISO/IEC 42001
• ISO/IEC 20000
• Knowledge of relevant legislation and regulatory frameworks, including:
• GDPR
• NIS2
• DORA
• Knowledge of additional security standards, frameworks, or regulations, such as PCI DSS and NIST, will be considered an advantage.
• Relevant professional certifications, such as CISM, CISSP, CISA, or ISO/IEC 27001 Lead Auditor, will be considered an advantage.
• Excellent written and verbal communication skills in both Greek and English.
• Strong analytical, organizational, and problem-solving skills.
• Ability to work effectively both independently and as part of a team.
• Ability to communicate effectively with stakeholders at all organizational levels.

What SYNTAX Offers

• Opportunities for career progression within the organization.
• A competitive remuneration package aligned with the candidate's qualifications and experience
• Opportunities to work on a diverse range of GRC and cybersecurity projects.
• Professional development and continuous learning opportunities.
• Exposure to international clients, technologies, and industry practices.
• A collaborative and professional working environment.

.

About SYNTAX IT Group

SYNTAX IT Group is an Information Technology Consulting organization operating since 1984 in Greece and the Arabian Gulf.

The company provides Software Technology, Consulting, and Professional Services across areas including:

• IT Operations
• IT Security Governance, Risk & Compliance
• Application Development and Modernization
• Service Management
• Service Level Agreement Management

SYNTAX serves organizations across a range of industries, including Finance, Telecommunications, Energy, Oil & Gas, Manufacturing, Transportation, and the Public Sector.

Only shortlisted candidates will be contacted.

All applications will be handled with strict confidentiality.

Please make sure to read our Recruitment Privacy Policy before submitting your application.