Governance, Risk, and Compliance (GRC) SME - Senior Consultant

NEPSE Trading; Polska; Hybrid; PLN 180,000 - 280,000; Full time

Job summary

Infosys Limited Poland seeks a Cyber GRC Senior Consultant to strengthen client cybersecurity postures, manage risks, and drive regulatory compliance. You will collaborate with security and IT teams to lead risk assessments and policy implementation on global projects.

The role requires deep framework knowledge, strong communication, and a willingness to travel as needed for client engagements. Remote work options are available for this international team.

Qualifications

• 1–5+ years in cyber security/Infosec.
• Experience with governance, risk, and compliance concepts.
• Strong written and verbal communication in English and local language.

Responsibilities

• Lead cyber GRC assessments on global projects.
• Direct and oversee development and implementation of cybersecurity policies.
• Support presales, bids, and proposals as a subject matter expert.
• Contribute to go-to-market offerings targeting C-Suite executives.

Skills

Cybersecurity

NIST CSF

Stakeholder management

Problem-solving

Communication

English proficiency

Education

Bachelor’s in Information Security / IT Security

Certifications: CISSP, CISM, CISA, GSLC, GSTRT, GCPM

Job description

# Governance, Risk, and Compliance (GRC) SME - Senior ConsultantInfosys LimitedPolandFull timeRemoteApply by Jan 6, 2027## About the roleDo you want to boost your career and collaborate with expert, talented colleagues to solve and deliver against our clients' most important challenges? We are growing and are looking for people to join our team. You'll be part of an entrepreneurial, high-growth environment of 300.000 employees.Our dynamic organization allows you to work across functional business pillars, contributing your ideas, experiences, diverse thinking, and a strong mindset. Are you ready? About the role We are looking for a highly skilled Cyber GRC (Governance, Risk, and Compliance) Senior Consultant to help organizations strengthen their cybersecurity posture, manage cyber risks, and ensure regulatory compliance.The ideal candidate will have deep expertise in cybersecurity frameworks, risk management, regulatory compliance, and security governance. As a Cyber GRC Senior Consultant, you will collaborate with client security, IT, and compliance teams to direct and oversee the development and implementation of cybersecurity policies, conduct risk assessments, and ensure adherence to global security standards and regulations.### ResponsibilitiesWork on global projects with a truly global team, with the support of over 330,000 technical staff from our parent organization. Contribute to the development of consulting go to market offerings and innovative solutions targeted at the C-Suite executive community that help them to understand and mitigate their cyber risks. Direct and lead NIST CSF risk assessments Oversee the design of innovative new services to lead the market incorporating AI and ML where it brings value.Support presales, sales, and account management pursuits from a subject matter expert perspective.### RequirementsRequirements You will have already achieved strong career progression to date, and experience working with recognized consulting brands and large commercial sector clients. You will have a passion for cyber security and a genuine interest in staying updated with the latest industry trends and developments. Your security experience must include: A relevant undergrad or post grad degree (Infosec, Cyber Security, IT Security) 1-5 years+ in the field of cyber security/infosec.A broad business skill set including stakeholder management, problem-solving, and resilience Experience in gathering, validating, synthesizing, documenting, and communicating data and information for a range of audiences Excellent interpersonal skills and strong written and verbal communication skills in country’s official language(s) (C2 proficiency) and English (C2 proficiency), project-related mobility/willingness to travel Your diverse Security experience should include one or some of below: · A good understanding of NIST CSF A post graduate degree in cyber /information security An understanding of ISO27001, NIS2, SOX, GDPR, DORA, · Cyber Due Diligence Assessments Third- Party & Supply chain Cyber Risk Management · Incident Response Plan review Supporting bids, RFP responses and proposals Crisis Management Exercises (CMX) Accreditation such as CISSP, CISM, CISA, GSLC, GSTRT, GCPM, Helped design Target Operating Models (TOMs) and RACI Matrices Helping the design of Cyber Security Roadmaps · Supporting Post Incident Reviews Reading and summarising Cyber Threat Intelligence reports Cyber security compliance programs (GDPR, DORA, ISO27001, NIS2, SOX) Cyber Security Risk Assessments or Maturity Assessments Design and/deliver awareness training. Worked on Identity and Access Management projects. Worked on Privileged access management projects Our ideal candidate may have some of the following skills: Have a broad business skill set including stakeholder management, problem-solving, and resilience Have experience in gathering, validating, synthesizing, documenting, and communicating data and information for a range of audiences Have excellent interpersonal skills and strong written and verbal communication skills in country’s official language(s) (C2 proficiency) and English (C2 proficiency), project-related mobility/willingness to travel Enjoy working with different clients from different industries.Have some experience in balancing technical and commercial considerations to develop practical advice or solutions for clients. Be able to build strong and effective business relationships at all levels Be able to support and oversee staff with less experience in their tasks Be able to explain complex cyber methodologies using accessible non-technical language (both written and verbal) Given that this is just a short snapshot of the role we encourage you to apply even if you don't meet all the requirements listed above. We are looking for team members who strive to make an impact and are eager to learn.If this sounds like you and you feel you have the skills and experience required, then please apply now.### BenefitsAbout your team At the Tech Transformation practice, we help CIOs overcome their biggest challenges such as geopolitical and macroeconomic uncertainty, cybersecurity, digital transformation, and budget constraints; enabling them to leverage technology to deliver value to their business. We have a team of business analysts, enterprise architects and cybersecurity specialists with business, operational, strategic, analytical and innovation skills. that come together to drive business IT alignment, Transform IT governance, IT Cost containment, operating efficiency improvements, Innovation enablement and cybersecurity risk, governance, and compliance. About Infosys Consulting Be part of a globally renowned management consulting firm on the front-line of industry disruption and at the cutting edge of technology.We work with market leading brands across sectors. Our culture is inclusive and entrepreneurial. Being a mid-size consultancy within the scale of Infosys gives us the global reach to partner with our clients throughout their transformation journey.Our core values, IC-LIFE, form a common code that helps us move for## Required skillsCybersecurity ConsultantGRC ConsultantInformation Security ConsultantIT Risk Management ConsultantManagement Consultantenglish\\_languagesalesEmployment type: Full timeLocation: PolandRemote: RemoteSalary: Salary not disclosedPosted on: Nov 9, 2026Apply by: Jan 6, 2027Source: HimalayasApply on HimalayasYou'll be taken to the original posting to apply directly with the employer. JobsNepal aggregates this listing; the application is handled by the source.