AI Governance & GRC Consultant

Employers from Greece; United States; Remote; USD 120,000 - 165,000; Full time

Benefits offered by this job

Competitive salary

Continuous learning

Equipment provided

No dress code

Professional development

Job summary

AI2CYBER is seeking a GRC & AI Governance Consultant to support client engagements and product governance. You will perform risk assessments, policy development, and control reviews, while guiding AI governance including inventories, ownership and approval processes.

Role requires strong English and Greek communication, with experience in GDPR/NIS2 and ISO 27001. Collaborative work with engineering, privacy, and legal teams is central to delivering actionable findings and closure.

Qualifications

• 3+ years in GRC, information security consulting, or IT audit.
• Practical ISO 27001 experience including risk assessments and control reviews.
• Experience documenting findings and following corrective actions to closure.
• Working knowledge of GDPR and familiarity with NIS2.
• Understanding of AI/generative AI risks and relevant controls.
• Ability to manage deliverables with diverse stakeholders in English and Greek.

Responsibilities

• Lead risk assessments, policy development and control design reviews.
• Coordinate audit preparation and track corrective actions to closure.
• Govern AI governance frameworks including inventories and approval processes.
• Collaborate with engineering, privacy and legal teams on evidence and controls.
• Present risks and remediation recommendations to management with priorities.

Skills

GRC experience

ISO/IEC 27001

AI governance

English & Greek fluency

Job description

AI2CYBER is seeking a GRC & AI Governance Consultant to support client engagements and product governance. You will perform risk assessments, policy development, and control reviews, while guiding AI governance including inventories, ownership and approval processes.

Role requires strong English and Greek communication, with experience in GDPR/NIS2 and ISO 27001. Collaborative work with engineering, privacy, and legal teams is central to delivering actionable findings and closure.