AI2CYBER - Current Openings
GRC & AI Governance Consultant
- Compensation
- Not disclosed
- Location
- Athens, Attica, Greece, United States
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Full time
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Develop and maintain ISO/IEC 27001 policies and processes, including risk assessments, risk treatment plans and Statements of Applicability.
- Assess control design and operating effectiveness, evaluate audit evidence and verify the completion of corrective actions.
- Maintain risk registers, document exceptions and residual risks, and prepare recommendations for accountable risk owners.
- Support GDPR, NIS2 and EU AI Act gap assessments, mapping applicable requirements to controls and evidence in collaboration with technical, privacy and legal specialists.
- Contribute to AI governance frameworks and ISO/IEC 42001 implementation, including AI inventories, risk and impact assessments, ownership, acceptable-use policies and approval processes.
- Work with engineering teams to define AI controls covering data quality and protection, access and agent permissions, human oversight, transparency, logging and change management.
- Review AI evaluation and security-test evidence against agreed acceptance criteria before deployment and after material changes. Coordinate periodic reassessments and track actions arising from contro
- Assess cloud and AI providers, including security assurances, data retention, use of customer data for model training and management of material service changes.
- Present significant risks, control weaknesses and overdue actions to management, with clear recommendations and priorities.
- At least three years of experience in GRC, information security consulting, IT audit or a related discipline.
- Practical experience applying ISO/IEC 27001, including risk assessments and control reviews.
- Experience evaluating evidence, documenting findings and following corrective actions through to completion.
- Working knowledge of GDPR and familiarity with NIS2.
- An understanding of common AI and generative AI use cases, with the ability to identify relevant risks and discuss appropriate controls.
- The ability to manage your deliverables, work constructively with technical and business stakeholders, and communicate clearly in English and Greek.
Full description
GRC & AI Governance Consultant
Location: Athens, Attica, Greece
Workplace: remote
Employment Type: full
Description
AI2CYBER develops cybersecurity products and delivers security services across cyber threat intelligence, application security and AI-enabled security operations.
We are looking for a GRC & AI Governance Consultant to support client engagements and our own products and services. Your work will cover risk assessments, policies, control reviews and audit preparation, alongside the governance of AI systems and their use.
You will take responsibility for assigned assessments and deliverables, work directly with technical and business teams, and help control owners address findings through to closure.
Requirements
- Develop and maintain ISO/IEC 27001 policies and processes, including risk assessments, risk treatment plans and Statements of Applicability.
- Assess control design and operating effectiveness, evaluate audit evidence and verify the completion of corrective actions.
- Maintain risk registers, document exceptions and residual risks, and prepare recommendations for accountable risk owners.
- Support GDPR, NIS2 and EU AI Act gap assessments, mapping applicable requirements to controls and evidence in collaboration with technical, privacy and legal specialists.
- Contribute to AI governance frameworks and ISO/IEC 42001 implementation, including AI inventories, risk and impact assessments, ownership, acceptable-use policies and approval processes.
- Work with engineering teams to define AI controls covering data quality and protection, access and agent permissions, human oversight, transparency, logging and change management.
- Review AI evaluation and security-test evidence against agreed acceptance criteria before deployment and after material changes. Coordinate periodic reassessments and track actions arising from control gaps and incidents.
- Assess cloud and AI providers, including security assurances, data retention, use of customer data for model training and management of material service changes.
- Present significant risks, control weaknesses and overdue actions to management, with clear recommendations and priorities.
What we are looking for
- At least three years of experience in GRC, information security consulting, IT audit or a related discipline.
- Practical experience applying ISO/IEC 27001, including risk assessments and control reviews.
- Experience evaluating evidence, documenting findings and following corrective actions through to completion.
- Working knowledge of GDPR and familiarity with NIS2.