Cyber GRC Specialist – Compliance & Risk Management

About the role

We are looking for a Cyber GRC Specialist to ensure cyber compliance across the group’s affiliates and maintain a high level of security. This 100% cyber role involves auditing, governance, risk management and close collaboration with internal and external stakeholders.

Key responsibilities

• Ensure compliance with applicable laws, regulations and standards such as NIS2, CIS Controls, NIST SP 800-53, NIST CSF and ISO 27001.
• Develop, enforce and update security policies, standards and procedures and monitor adherence across the group.
• Conduct risk assessments, identify vulnerabilities and drive mitigation plans, reporting results to management.
• Maintain the information asset inventory and cybersecurity control catalog.
• Lead internal security audits, respond to external audit requests and audit third‑party vendors.
• Design and run security awareness initiatives, including phishing simulations tailored to roles and departments.
• Collaborate with HR on security aspects of the employee lifecycle.

Required profile

• Minimum 5 years of experience in cybersecurity with a focus on hands‑on auditing, governance and risk management.
• Background in cyber audit or consulting (Big 4) followed by experience in a CISO or IT Risk team within a regulated environment.
• Solid understanding of regulatory requirements and industry standards.
• Familiarity with modern security architecture best practices and incident response.

Required skills

• NIS2
• CIS Controls
• NIST SP 800-53
• NIST CSF
• ISO 27001
• Cyber audit
• Governance
• Risk management