Senior Cybersecurity GRC Consultant

**1. Governance &
Compliance Expert**

• Design, implement, and

manage GRC frameworks (e.g., ISO 27001, PCI-DSS, FRA Regulation,
SOC 2) tailored to client needs.

• Develop and

maintain security policies, standards, and procedures aligned
with regulatory requirements (ISO27001, PCI-DSS, etc.).

• Lead compliance

audits (internal/external) and certification processes (e.g., ISO
27001, PCI-DSS).

• Conduct gap

analyses and maturity assessments to identify areas for improvement.

**2. Risk Management &
Assessment**

• Perform enterprise-wide risk

assessments to identify threats, vulnerabilities, and business impacts.

• Create risk treatment plans,

mitigation strategies, and risk registers for clients.

• Advise on third-party/vendor

risk management, including due diligence and contract reviews.

**3. Client Advisory &
Collaboration**

• Act as a trusted

advisor to clients, translating technical risks into business terms
for executives and stakeholders.

• Deliver executive-level

reports, dashboards, and workshops on GRC initiatives.

• Support pre-sales

activities (scoping, proposals) and post-sales service
delivery to ensure client success.

**4. Audit &
Documentation**

• Prepare and maintain audit

documentation (e.g., ISO evidence, PCI Compliance Report).

• Manage remediation

efforts for audit findings and compliance gaps.

• Stay updated on evolving

regulations and industry standards.

6. Strategic Initiatives

• Lead security awareness

programs for clients, including training and phishing simulations.

• Mentor junior team members and

contribute to internal knowledge sharing.

Requirements

• 2-4 years in GRC, IT risk

management, or cybersecurity compliance.

• Expertise in 2+

frameworks/regulations (e.g., ISO 2700, PCI-DSS, CIS Controls).

• Certifications: relevant GRC

certification like ISO27001 LI/LA, GRCP, CISSP.

• Strong client-facing

skills with the ability to simplify complex technical concepts.