GRC Consultant

We are continuously growing and we are looking for a GRC Consultant to join our UniQue Security & Compliance Services team.

Our UniQue people come from a variety of different backgrounds and industries, with different skillsets and approaches, but they have one thing in common: passion for technology and innovation!

In this role, you will advise clients, implement GRC frameworks, and support regulatory compliance (Cybersecurity, Privacy, Business Continuity, AI Compliance, Third-Party Risk, and related areas) across a diverse portfolio of industries, helping organizations strengthen their risk management and resilience.

For the GRC Consultant position, we expect you to:

• Collaborate with clients to understand business objectives and assess their current risk and compliance maturity.
• Develop and implement customized GRC frameworks, policies, and procedures tailored to each client’s needs.
• Conduct risk assessments, vulnerability assessments, and gap analyses, and translate findings into actionable improvement plans.
• Provide guidance on regulatory compliance requirements and support clients in meeting relevant standards and regulations.
• Help clients select and implement GRC tools that support their governance, risk, and compliance objectives.
• Facilitate training sessions and workshops to support client awareness and adoption of GRC best practices.
• Provide time and effort estimates for prospective engagements and contribute to the technical writing of proposals and offers.
• Participate in the project management process of current projects.
• Take ownership of project delivery within your scope (assigned workstreams and deliverables), ensuring quality and timely execution.
• Stay abreast of industry trends, emerging risks, and regulatory changes affecting Governance Risk and Compliance (GRC).

Your experience, skillset and qualifications are going to help you succeed in this position, moving forward.

•  Bachelor’s degree in a relevant field (Cyber Security, Information Technology, Risk Management, etc.) is required.
•  Master’s degree in information security or relative discipline will be considered a plus.
•  2+ years of proven expertise on one or more of the following fields: Security, Privacy, Business Continuity, GRC.
•  Good level of understanding of established Information Security frameworks (i.e., NIST, ISO 27001) and Governance Risk and Compliance (GRC).
•   Analytical and problem-solving skills.
•   Strong communication skills to work with various business stakeholders.
•   Professional certifications such as [CISA, CISM, CISSP, etc.] are a plus.
•   Excellent knowledge of English language (written and verbal).
•   Flexibility to travel abroad (mainly EU countries, 5% of the working time).