We are seeking an experienced Governance, Risk, and Compliance (GRC) Consultant to join our team. The ideal candidate will have hands-on experience managing complex security and compliance programs for large, multi-national enterprises across EU, NAM, and LATAM jurisdictions.
🔹 Key Responsibilities:
Support and enhance enterprise-wide security governance and risk management programs.
Lead and support initiatives across:
Security Operations Centre, Incident Response, and Digital Forensics
OT Monitoring and Vulnerability Management
End-User and Application Security Governance
Cloud and Network Security Governance
Data Protection and Privacy Governance
Risk and Compliance Assessments
Security Awareness and Training Programs
Identity and Access Governance
Third-Party Risk Management
Conduct GRC assessments
and gap analyses against regulatory and industry standards.
Provide actionable recommendations to improve compliance posture.
Collaborate with global teams to ensure adherence to regulatory requirements in EU, NAM, and LATAM regions.
Develop documentation, reports, and executive summaries for management and audit purposes.
🔹 Required Qualifications:
Bachelor’s degree in information security, Computer Science, or related field.
Minimum 5 years of experience in GRC, cybersecurity governance, or compliance roles.
Proven understanding of regulatory frameworks such as GDPR, NIST, ISO 27001, SOC 2, SOX, HIPAA, etc.
Experience supporting multi-national organizations across multiple jurisdictions.
Strong communication and stakeholder management skills.
Professional certifications such as CISM, CRISC, CISSP, ISO 27001 LA/LI, or similar are a plus.
