Governance, Risk & Compliance (GRC) Consultant

About the role

As a Consultant in the Governance, Risk & Compliance (GRC) team, you will support clients in identifying, assessing and managing cyber risks that affect their business objectives. You will work under the guidance of managers and senior colleagues on diverse projects across industries, delivering practical, value‑driven cybersecurity and risk‑management solutions.

Key responsibilities

• Identify vulnerabilities, assess potential impacts and recommend remediation and mitigation measures.
• Ensure cybersecurity practices align with regulations and standards such as ISO 27001, DORA, NIS2, NIST and IEC.
• Support detection, response, containment and recovery from cybersecurity incidents to minimise operational disruption.
• Align cybersecurity strategies and controls with clients’ business priorities and objectives.
• Deliver integrated cybersecurity and risk solutions for both technical and non‑technical stakeholders.
• Assist clients in adapting security strategies and maintaining an effective cybersecurity posture.

Required profile

• Academic background (BSc/MSc) in Information Technology, Computer Science, Cybersecurity or a related field.
• Knowledge of cybersecurity strategies, risk and compliance assessments, frameworks and risk quantification.
• Strong interest in staying informed about emerging threats, trends, regulations and industry frameworks.
• Self‑motivated, collaborative team player with strong interpersonal and relationship‑building abilities.
• Analytical and problem‑solving skills with the ability to translate complex findings into clear, actionable insights.

Required skills

• ISO 27001
• DORA (Digital Operational Resilience Act)
• NIS2 Directive
• NIST framework
• IEC 62443
• ServiceNow GRC
• RSA Archer
• OneTrust
• PowerBI
• AWS cloud security
• Microsoft Azure cloud security
• Google Cloud security
• CompTIA Security+ certification
• ISO 27001 Lead Auditor certification
• Microsoft Azure Fundamentals certification