Senior GRC Consultant: Security Strategy & CISO-for-Hire

Mnemonic; Utrecht; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Bonus scheme

Share scheme

Pension and insurance

Training and conferences

Flexible working model

Centrally located office in Utrecht

Social activities

Job summary

Mnemonic is seeking a Senior GRC Consultant to strengthen our Netherlands GRC team in Utrecht. You will work with clients across Europe, translating governance, risk and compliance into practical security programs and ISMS implementations.

You’ll interact with executive leadership, deliver strategic advice, and guide projects from scoping to delivery. You’ll collaborate with an international team, contribute to our GRC offerings, and support pre-sales activities.

Qualifications

• At least 5 years in information security and GRC, preferably in consultancy.
• Experience translating risk, regulatory requirements into governance structures.
• Knowledge of ISO 27001, NIST or similar frameworks.
• Fluent Dutch and English, spoken and written.
• Strong analytical and communication skills.

Responsibilities

• Lead consultancy projects in information security and GRC from analysis to implementation.
• Act as security manager or CISO-for-hire for clients.
• Translate regulations and risks into governance structures and processes.
• Advise boards on governance, risk and maturity development.
• Present technical findings to management in business terms.
• Plan risk analyses, security assessments and resilience exercises.
• Develop ISMS and support compliance initiatives.
• Collaborate with business and technical teams.
• Manage multiple parallel projects and stakeholder engagement.
• Contribute to Mnemonic's GRC offering and participate in pre-sales.

Skills

GRC expertise

Governance & Risk Management

Compliance

Information Security

Strategic advisory

Leadership

Dutch & English communication

Education

HBO/WO degree in IT or Information Security

Job description

Mnemonic is seeking a Senior GRC Consultant to strengthen our Netherlands GRC team in Utrecht. You will work with clients across Europe, translating governance, risk and compliance into practical security programs and ISMS implementations.

You’ll interact with executive leadership, deliver strategic advice, and guide projects from scoping to delivery. You’ll collaborate with an international team, contribute to our GRC offerings, and support pre-sales activities.