Senior Cybersecurity GRC Advisor: Privacy & Compliance

RMM Consulting Group; Warszawa; On-site; PLN 180,000 - 300,000; Full time

Job summary

RMM Consulting Group is seeking a seasoned Cybersecurity Governance, Risk and Compliance Consultant for a client project in Warsaw, Poland. The consultant will strengthen governance, risk, and compliance across cybersecurity laws, standards, and privacy regulations, shaping policies and operational processes.

The role requires deep GRC expertise, hands-on ServiceNow GRC experience, and leadership in risk management, policy development, and trainings.

Qualifications

• Minimum 5+ years in cybersecurity GRC with focus on risk management.
• Experience designing or operationalizing cyber risk management frameworks.
• Hands-on experience with ServiceNow GRC (IRM, Risk, Policy and Compliance modules).
• Experience maintaining cybersecurity risk registers.
• Experience integrating risk management with vulnerability, incident, cloud, and third-party risk management.
• Experience contributing to cybersecurity maturity improvement programmes.

Responsibilities

• Ensure compliance with data privacy and data protection standards, laws, and regulations.
• Provide legal advice and guidance on cybersecurity and data protection topics.
• Identify and document compliance gaps and propose remediation actions.
• Conduct privacy impact assessments and maintain relevant policies and procedures.
• Promote and enforce the organization’s data protection program.
• Act as a point of contact for queries and complaints regarding data processing.
• Support design, implementation, auditing, and compliance testing activities.
• Monitor audits and data protection-related training activities.
• Contribute to the development of cybersecurity strategies, policies, and procedures.
• Develop and deliver staff awareness and training initiatives.
• Manage legal aspects of information security and third‑party relationships.
• Collaborate with stakeholders, authorities, and professional groups on cybersecurity and compliance matters.

Skills

Cybersecurity GRC

Risk management

Policy development

ServiceNow GRC

Regulatory compliance

Education

University degree (EQF Level 7)

Tools

ServiceNow GRC

Job description

RMM Consulting Group is seeking a seasoned Cybersecurity Governance, Risk and Compliance Consultant for a client project in Warsaw, Poland. The consultant will strengthen governance, risk, and compliance across cybersecurity laws, standards, and privacy regulations, shaping policies and operational processes.

The role requires deep GRC expertise, hands-on ServiceNow GRC experience, and leadership in risk management, policy development, and trainings.