AI Governance & GRC Consultant

Ai2cyber; United States; Teletrabalho; USD 100 000 - 160 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Equipment support

No dress code

Continuous learning & development

Resumo da oferta

AI2CYBER seeks a GRC & AI Governance Consultant to lead risk assessments, policy development, control reviews and audit preparation, while governing AI systems and their use. You will engage with technical and business teams, drive findings to closure and manage accountability for risk controls.

Responsibilities include maintaining ISO/IEC 27001 controls, evaluating evidence, supporting GDPR/NIS2 and EU AI Act gap assessments, and contributing to AI governance frameworks.

Qualificações

• Minimum three years of experience in GRC, information security consulting, IT audit or related discipline.
• Practical experience applying ISO/IEC 27001, including risk assessments and control reviews.
• Experience documenting findings and following actions through to completion.
• Working knowledge of GDPR and familiarity with NIS2.
• Understanding of AI and generative AI use cases, with ability to identify risks and discuss controls.
• Ability to manage deliverables and communicate in English and Greek.

Responsabilidades

• Develop and maintain ISO/IEC 27001 policies and processes, including risk assessments, risk treatment plans and Statements of Applicability.
• Assess control design and operating effectiveness, evaluate audit evidence and verify corrective actions.
• Maintain risk registers, document exceptions and residual risks, and prepare recommendations for risk owners.
• Support GDPR, NIS2 and EU AI Act gap assessments, mapping requirements to controls and evidence with specialists.
• Contribute to AI governance frameworks and ISO/IEC 42001 implementation, including AI inventories and risk assessments.
• Work with engineering teams to define AI controls covering data quality, access, logging and change management.
• Review AI evaluation and security-test evidence against acceptance criteria before deployment and after changes.
• Assess cloud and AI providers, including security assurances and data usage for model training.
• Present significant risks and overdue actions to management with clear recommendations.

Conhecimentos

GRC expertise

ISO/IEC 27001

GDPR knowledge

AI governance

English & Greek communication

Formação académica

ISO 27001 Lead Implementer

Descrição da oferta de emprego

AI2CYBER seeks a GRC & AI Governance Consultant to lead risk assessments, policy development, control reviews and audit preparation, while governing AI systems and their use. You will engage with technical and business teams, drive findings to closure and manage accountability for risk controls.

Responsibilities include maintaining ISO/IEC 27001 controls, evaluating evidence, supporting GDPR/NIS2 and EU AI Act gap assessments, and contributing to AI governance frameworks.