Cybersecurity Consultant – GRC Focus

About the role

We are seeking a Cybersecurity Consultant to join our Business Consulting Services (BCS) unit. In this role you will help clients protect their operations by delivering governance, risk management, and compliance (GRC) services, designing security frameworks, and ensuring regulatory adherence.

Key responsibilities

• Consult with clients to understand their cybersecurity governance, risk, and compliance needs and develop tailored solutions.
• Design and implement security frameworks, policies, and procedures aligned with industry best practices and regulations such as ISO 27001, GDPR, NIST, and NIS.
• Conduct risk assessments, identify mitigating controls, and create comprehensive risk‑management plans.
• Produce reports, presentations, and training materials to communicate findings and recommendations.
• Manage day‑to‑day client project activities and coordinate with internal teams on advanced protection mechanisms.
• Present observations and recommendations to senior management and support business‑development initiatives for the BCS Cybersecurity Consulting Services.

Required profile

• Minimum 2 years of professional experience in information security, IT audit, or cybersecurity consulting.
• BSc or MSc in Computer Science, Information Technology, or Information Security.
• Familiarity with risk‑assessment methodologies, governance frameworks, and compliance requirements.
• Ability to adapt to a fast‑changing cybersecurity landscape.

Required skills

• ISO 27001
• GDPR
• NIST
• NIS
• Risk assessment methodologies
• Security controls implementation and assessment
• CISSP certification (or equivalent)
• CISA certification (or equivalent)