GRC Consultant (M/F)

SecuLabs SA; Genf, Lausanne; Teletrabalho; CHF 110 000 - 140 000; Tempo integral

Resumo da oferta

SecuLabs SA is seeking a GRC Consultant to support clients in Geneva and/or Lausanne on security governance, risk management, compliance and cybersecurity audit assignments.

You will work on assignments with strong functional and/or technical content, supporting clients with security governance, risk management and security audits in French-speaking Switzerland across Geneva and/or Lausanne. Proficiency in French and English is required.

Qualificações

• Degree in engineering, business, or university with information security risk/is audit focus.
• Experience with multiple standards: ISO 27001/02/05, ISO 19011, ITIL, CIS/SANS 20, NIST.
• Strong writing, autonomy, and client-facing communication.

Responsabilidades

• Define, write and implement information security policies.
• Define and implement ISMS programmes.
• Analyze and map risks and define treatment plans.
• Support CISOs in governance, roles, and controls.
• Define, run and review audits against ISO, NIST, CIS/SANS 20 and others.
• Advise clients through audit and compliance programmes.
• Contribute to information security awareness campaigns.

Conhecimentos

GRC

Security policy

ISMS

CISO support

Formação académica

Master's degree in information security / IS audit

Descrição da oferta de emprego

SecuLabs is looking for a GRC Consultant to support its clients in Geneva and/or Lausanne on security governance, risk management, compliance and cybersecurity audit assignments.

You work on assignments and projects with a strong functional and/or technical content, supporting SecuLabs clients with security governance, risk management and security audit in French-speaking Switzerland, in Geneva and/or Lausanne.

Our clients are very varied: the private sector, from SMEs to multinationals across many industries, as well as the public sector.

• Define, write and implement information security policies.
• Define and implement Information Security Management Systems (ISMS).
• Analyse and map risks, then define the associated treatment plans.
• Support CISOs in defining and organising security, roles, responsibilities and the associated controls.
• Define, run and review security audits against various frameworks: ISO, NIST, CIS/SANS 20 and others.
• Implement ISO 27001 programmes (Information Security Management System, ISMS).
• Support and advise clients through their security audit and compliance programmes.
• Take part in information security awareness campaigns.
• A degree from an engineering school, business school or university, preferably specialising in information security risk and/or IS audit (Master's, HES Bachelor's or equivalent).
• Adaptability and curiosity about new problems, methodologies and tools.
• Experience with several frameworks and standards: ISO 27001, ISO 27002, ISO 27005, ISO 19011, ITIL, CIS/SANS 20 and NIST.
• Rigour, autonomy, strong interpersonal skills and good writing ability.
• A wish to contribute to excellent client service and to join a motivated, dynamic and fast-growing team.
• Proficiency in French and English.

• GRC
• Security policy
• ISMS
• CISO support

Frameworks & security audit

You work with several security standards and frameworks to structure, audit and improve your clients' security set-ups.

• ISO 27001
• ISO 27002
• ISO 27005
• ISO 19011
• NIST
• ITIL
• CIS/SANS 20

A role at the crossroads of security, risk and organisation. You support clients from defining their governance through to audits and compliance programmes, with a strong advisory and structuring dimension.

Discover the SecuLabs openings

Not quite the right role? The team's other openings.