GRC Senior Consultant: Cyber Risk & Compliance (Hybrid)

Thales Group; Zamudio; Híbrido; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Thales Group in Spain is seeking a GRC Senior Consultant to navigate today’s evolving security and regulatory landscape. You will work on cybersecurity assessments, audits, and risk and compliance initiatives across major frameworks, advising clients and helping enhance GRC services.

This hybrid role requires strong experience in GRC, project coordination and client-facing delivery, with a proactive, collaborative approach to improving security governance.

Qualificações

• Min. 5 years of cybersecurity experience with at least 3 years in GRC.
• Knowledge of ISO 27001, NIST CSF, PCI DSS, ENS, GDPR, NIS2, DORA.
• Professional proficiency in English (written and spoken).
• Experience in project management and stakeholder management.
• Strong analytical and communication skills.

Responsabilidades

• Define and validate the scope of cybersecurity assessments, compliance reviews and audits.
• Review technical documentation, security policies, procedures, regulations and control frameworks.
• Conduct interviews and working sessions with security stakeholders.
• Collect, review and validate supporting evidence for assessments and audits.
• Identify potential compliance gaps and provide remediation guidance.
• Advise clients and internal stakeholders on information security standards and regulations.
• Participate in GRC projects related to PCI DSS, NIST CSF, ISO 27001, ENS, ISO 22301, GDPR, NIS2 and DORA and AI governance.
• Prepare clear reports, assessments, findings and project deliverables.
• Coordinate and manage cybersecurity and GRC projects with multidisciplinary teams.
• Contribute to development and evolution of GRC products and services.
• Bring proactive problem-solving to client challenges.

Conhecimentos

GRC

ISO 27001

NIST CSF

PCI DSS

GDPR

ISO 22301

Regulatory compliance

English proficiency

Project management

Stakeholder management

Analytical skills

Team coordination

Proactive/autonomous

Creativity

Formação académica

Engineering/IT/Telecommunications degree

Descrição da oferta de emprego

Thales Group in Spain is seeking a GRC Senior Consultant to navigate today’s evolving security and regulatory landscape. You will work on cybersecurity assessments, audits, and risk and compliance initiatives across major frameworks, advising clients and helping enhance GRC services.

This hybrid role requires strong experience in GRC, project coordination and client-facing delivery, with a proactive, collaborative approach to improving security governance.