Cybersecurity GRC Consultant

Amaris Consulting | Part of Mantu; Madrid; Hybrid; EUR 40,000 - 68,000; Full time

Benefits offered by this job

Remote work options

Transit tickets

Restaurant tickets

Kindergarten support

Private health insurance

WeCare program

Job summary

Amaris Consulting is seeking a Cybersecurity GRC Analyst (SAP focus) to join an international team and support security governance and risk analysis across SAP applications. You will collaborate with the RSSI/CISO, IT owners, and business teams while helping drive remediation plans and KPI dashboards in a global, fast-paced environment.

You will contribute to security committees, review contracts, and ensure effective security controls, with English language proficiency and strong stakeholder

Qualifications

• 2–4 years of cybersecurity experience with a GRC focus.
• Experience assessing security risks for business applications.
• Ability to review CIA criteria and follow up on remediation plans.
• Experience contributing to or reviewing cybersecurity clauses in contracts is a plus.
• Comfortable preparing security committees, KPIs and risk documentation for stakeholders.
• Ability to collaborate with IT owners, business teams and the RSSI/CISO, acting as a bridge between technical and business areas.
• SAP security / SAP GRC experience is a strong plus.
• Strong English communication and documentation skills.

Responsibilities

• Support RSSI/CISO in security governance and risk analysis across SAP applications.
• Assess application security risks, especially for SAP and other key business applications.
• Review and challenge confidentiality, integrity and availability requirements and ensure appropriate controls are in place.
• Follow up on remediation plans, tracking progress and ensuring timely closure of security findings.
• Contribute to the review of cybersecurity clauses in contracts with vendors and partners.
• Prepare and support security committees, including dashboards, KPIs and risk reports.
• Maintain and update the security status of the application portfolio.
• Act as an interface between IT owners and the RSSI/CISO, ensuring alignment on risks, controls and action plans.

Skills

GRC expertise

Cybersecurity

SAP GRC

Stakeholder management

English proficiency

Tools

SAP

SAP GRC

Job description

Job Description

Take your career to the next level with Amaris Consulting as a

• 2-4 years of experience in Cybersecurity, with a focus on GRC, governance or risk analysis (senior profiles also welcome).
• Proven experience assessing security risks for business applications.
• Strong ability to review confidentiality, integrity and availability (CIA) criteria and follow up on remediation plans.
• Experience contributing to or reviewing cybersecurity clauses in contracts is a strong plus.
• Comfortable preparing security committees, KPIs and risk documentation for stakeholders.
• Ability to collaborate with IT owners, business teams and the RSSI/CISO, acting as a bridge between technical and business areas.
• SAP security / SAP GRC experience is a strong plus.
• Good level of English (spoken and written) for meetings, documentation and committees.
• Strong communication, stakeholder management and organizational skills.

Job Description

Take your career to the next level with Amaris Consulting as a Cybersecurity GRC Analyst (SAP focus). Become part of an international team, thrive in a global group with €800M turnover and 1,000+ clients worldwide, and an agile environment by planning the kickoff and follow up on projects. Join Amaris Consulting, where you can develop your potential and make a difference within the company.

WHAT WOULD YOU NEED?

• 2-4 years of experience in Cybersecurity, with a focus on GRC, governance or risk analysis (senior profiles also welcome).
• Proven experience assessing security risks for business applications.
• Strong ability to review confidentiality, integrity and availability (CIA) criteria and follow up on remediation plans.
• Experience contributing to or reviewing cybersecurity clauses in contracts is a strong plus.
• Comfortable preparing security committees, KPIs and risk documentation for stakeholders.
• Ability to collaborate with IT owners, business teams and the RSSI/CISO, acting as a bridge between technical and business areas.
• SAP security / SAP GRC experience is a strong plus.
• Good level of English (spoken and written) for meetings, documentation and committees.
• Strong communication, stakeholder management and organizational skills.

WHAT WILL YOU DO?

As a GRC Security Assistant, you will support the RSSI/CISO in security governance and risk analysis activities across Operations and Finance, with a particular focus on SAP applications:

• Support and contribute to security governance activities across the application landscape.
• Assess application security risks, especially for SAP and other key business applications.
• Review and challenge confidentiality, integrity and availability requirements and ensure appropriate controls are in place.
• Follow up on remediation plans, tracking progress and ensuring timely closure of security findings.
• Contribute to the review of cybersecurity clauses in contracts with vendors and partners.
• Prepare and support security committees, including the creation of dashboards, KPIs and risk reports.
• Maintain and update the security status of the application portfolio.
• Act as an interface between IT owners and the RSSI/CISO, ensuring alignment on risks, controls and action plans.
• Contribute to the continuous improvement of security processes, standards and documentation.

WHY US?

Join our dynamic team of talented individuals and experience a world of growth and opportunities. Here's what we offer:

• Grow rapidly with a tailored career path and salary evaluation. 70% of our senior leaders started at entry level.
• Enhance your skills through our Tech Academy catalog, Udemy E-learning Platform, Languages Sessions, webinars, and workshops.
• Take charge of your training with an annual personal budget and company-paid certifications.
• Enjoy flexible policies, remote work options, and fantastic social benefits like transit and restaurant tickets, kindergarten support, and private health insurance.
• Benefit from our WeCare program, supporting employees in critical situations.
• Unleash your full potential, both professionally and personally.

Amaris Consulting is proud to be an equal-opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.

Who are we?

Amaris Consulting, part of Mantu is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1,000 clients across the globe, we have been rolling out solutions in major projects for over a decade - this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We're focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your steppingstone to cross rivers of change, meet challenges and achieve all your projects with success.

At Amaris, we strive to provide our candidates with the best possible recruitment experience. We like to get to know our candidates, challenge them, and be able to give them proper feedback as quickly as possible. Here’s what our recruitment process looks like:

Brief Call: Our process typically begins with a brief virtual/phone conversation to get to know you! The objective? Learn about you, understand your motivations, and make sure we have the right job for you!

Interviews (the average number of interviews is 3 - the number may vary depending on the level of seniority required for the position). During the interviews, you will meet people from our team: your line manager of course, but also other people related to your future role. We will talk in depth about you, your experience, and skills, but also about the position and what will be expected of you. Of course, you will also get to know Amaris: our culture, our roots, our teams, and your career opportunities!

Case study: Depending on the position, we may ask you to take a test. This could be a role play, a technical assessment, a problem-solving scenario, etc.

As you know, every person is different and so is every role in a company. That is why we have to adapt accordingly, and the process may differ slightly at times. However, please know that we always put ourselves in the candidate's shoes to ensure they have the best possible experience.

We look forward to meeting you!