Senior GRC Consultant - Hybrid Security & Compliance

Thales; Vitoria; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Room and attention to personal develop

Build your talents in another domain

Mobility policy enabling career moves

Job summary

Thales in Spain is seeking a GRC Senior Consultant to help clients navigate cybersecurity and regulatory challenges. You will conduct assessments, audits and risk reviews across leading frameworks and regulations, and contribute to the development of GRC services.

Based in Bilbao or Vitoria, the role offers a hybrid working model and opportunities to coordinate multi-disciplinary teams, engage with clients, and deliver clear, actionable reports on security governance and compliance.

Qualifications

• Minimum 5 years in cybersecurity with at least 3 years in GRC.
• Experience with ISO 27001, NIST CSF, PCI DSS, GDPR, NIS2, DORA.

Responsibilities

• Define and validate the scope of cybersecurity assessments, compliance reviews and audits, ensuring alignment with applicable standards and regulatory requirements.
• Review and assess technical documentation, security policies, procedures, regulations and control frameworks.
• Conduct interviews and working sessions with stakeholders responsible for security measures, processes and controls.
• Collect, review and validate supporting evidence as part of cybersecurity assessments and audits.
• Identify potential compliance gaps and provide guidance on how to address them.
• Advise clients and internal stakeholders on compliance with information security standards, regulations and cybersecurity best practices.
• Participate in GRC projects related to frameworks and regulations such as PCI DSS, NIST CSF, ISO 27001, ENS, ISO 22301, GDPR, NIS2 and DORA, as well as emerging areas related to AI governance and compliance.
• Prepare clear and comprehensive reports, assessments, findings and project deliverables.
• Support the coordination and management of cybersecurity and GRC projects, working with multidisciplinary teams and different stakeholders.
• Contribute to the development, evolution and continuous improvement of GRC products and services.
• Bring a proactive and problem-solving approach to client challenges, identifying opportunities to improve security governance, risk management and compliance processes.

Skills

GRC Expertise

Cybersecurity

Project Management

Stakeholder Management

English Proficiency

Analytical Skills

Teamwork

Education

Engineering/IT degree

Job description

Thales in Spain is seeking a GRC Senior Consultant to help clients navigate cybersecurity and regulatory challenges. You will conduct assessments, audits and risk reviews across leading frameworks and regulations, and contribute to the development of GRC services.

Based in Bilbao or Vitoria, the role offers a hybrid working model and opportunities to coordinate multi-disciplinary teams, engage with clients, and deliver clear, actionable reports on security governance and compliance.