Cybersecurity GRC Professional (DPP)

About the role

EY is hiring a DPP / Cyber GRC Professional for its Cyber Security practice in Greece. The role sits in two domains: Strategy, Risk, Compliance (GRC) and Data Protection & Privacy. It involves working with clients and colleagues on security strategies, privacy controls, stakeholder advice, workshops and business development, with a hybrid working model across Athens, Patras, Thessaloniki and Crete.

Key responsibilities

• Develop security strategies and design security and privacy controls
• Advise client stakeholders and facilitate workshops
• Support business development
• Perform Business Impact Analysis (BIA) and information security risk assessments
• Carry out data protection impact assessments (DPIA) and develop Registers of Processing Activities (RoPAs)
• Design and implement security policies, procedures, standards and controls, and information security management systems
• Assess, design and implement security strategies and governance frameworks
• Implement disaster recovery, business continuity and crisis management programmes
• Conduct third-party risk management and vendor risk assessments

Required profile

• Master's degree or equivalent in Information Security, Cyber Security, IT, Informatics or a similar technical field
• Strong interest in information and cyber security, with evidence of self-motivation
• Good organizational and time management skills, able to handle several complex projects under tight deadlines
• Ability to translate security issues into business risks and to explain technical advice to clients
• Experience in data privacy, GRC, risk assessments and security policy implementation

Required skills

• Knowledge of frameworks such as ISO 27001/27002, COBIT, NIST, ITIL
• Desirable: CISSP, SSCP, CISM, ISO 27001 lead implementer or auditor, CompTIA Security+, CIPM, CIPT, DPO Executive
• Desirable: TPRM, ORM, ERM, DPIA, RoPA, iSMP, Prince II, Scrum, Agile

What we offer

• Unlimited access to educational platforms, EY Badges and EY Degrees, with coaching and certification support
• Access to GenAI tools and exposure to international projects
• Competitive rewards package, health and life insurance, and a benefits club card
• Flexible hybrid working, summer short Fridays and an EY Day Off