Cybersecurity GRC Consultant (Mid/Senior)

Quality & Reliability S.A. (QnR); Ohio; On-site; USD 90,000 - 130,000; Full time

Job summary

QnR Group's SysteCom unit seeks a Cybersecurity GRC Consultant to translate obligations into governance, policies and controls. You’ll develop risk treatment plans and roadmaps, and support audit readiness.

You’ll work on gap assessments, maturity reviews and reporting to leadership. Experience with ISO/IEC 27001, NIS2 and DORA is essential, with ability to articulate requirements to technical and executive audiences.

Qualifications

• Experience in cybersecurity governance, risk, compliance, audit or advisory work.
• Ability to interpret obligations and translate into controls and evidence.
• Strong policy, procedure, report and roadmap drafting skills.

Responsibilities

• Conduct gap assessments, maturity reviews and control evaluations.
• Develop policies, standards, risk-treatment plans and governance reports.
• Support NIS2, DORA, ISO/IEC 27001 and related compliance initiatives.
• Coordinate evidence, audits, remediation actions and stakeholder reporting.
• At senior levels, advise leadership on cybersecurity strategy and governance.

Skills

Cybersecurity governance

Audit & compliance

Education

Professional certifications (CISM/CISA/CRISC/CGRC/Lead Implementer/Auditor)

Tools

ISO/IEC 27001

Job description

Are you a Cybersecurity GRC Consultant? Think bigger about your next move!

Build your future with QnR Group.
JOIN THE NEXT EUROPEAN TECHNOLOGY POWERHOUSE

Cybersecurity GRC Consultant | SysteCom, member of QnR Group

Role overview

We are looking for a Cybersecurity GRC Consultant to help organisations translate cybersecurity obligations and business risks into workable governance, policies, controls and improvement roadmaps.

About QnR Group

QnR Groupis a technology group with 35 years of experience, 8 companies, 4 delivery centers and 210+ professionals across Greece, Belgium, Cyprus and Poland. Listed on the Athens Stock Exchange since 2000, we deliver mission-critical digital transformation projects for the public and private sector. The Group’s capabilities coverssoftware engineering, enterprise and generative AI, cybersecurity, cloud infrastructure, SAP and ServiceNow solutions, core banking and maritime intelligence.

About SysteCom

SysteCom, a member of QnR Group, specializes in cybersecurity, digital resilience and IT infrastructure. The company delivers solutions and services that help organizations protect their systems and data, strengthen operational continuity and modernize their technology environments. Bringing together security and infrastructure expertise, SysteCom supports businesses across sectors in building secure, reliable and resilient digital operations.

What you'll work on:

• Conduct gap assessments, maturity reviews and control evaluations
• Develop policies, standards, risk-treatment plans and governance reports
• Support NIS2, DORA, ISO/IEC 27001 and related compliance initiatives
• Coordinate evidence, audits, remediation actions and stakeholder reporting
• At senior levels, advise leadership on cybersecurity strategy and governance

What you bring:

• Experience in cybersecurity governance, risk, compliance, audit, information-security management or advisory work
• Detailed knowledge of ISO/IEC 27001 and familiarity with NIST CSF, CIS Controls or comparable frameworks
• Practical experience conducting gap assessments, maturity reviews, control evaluations or audit-readiness activities
• Ability to interpret NIS2, DORA and other applicable obligations and convert requirements into proportionate controls and evidence
• Strong policy, procedure, report and roadmap drafting skills
• Ability to facilitate workshops, interview stakeholders and communicate findings to technical and executive audiences
• Understanding of ISMS operation, risk treatment, statements of applicability, corrective actions and control ownership
• For senior candidates, experience defining governance models, advising leadership and leading multi-workstream compliance programmes

Required certifications:

Mid-level and Senior: at least one professional certification, such as CISM, CISA, CRISC, ISC2 CGRC, ISO/IEC 27001 Lead Implementer or Lead Auditor, or equivalent

Nice to have:

• CISM, CISA, CRISC, CGRC, ISO/IEC 27001 Lead Implementer/Auditor or equivalent
• Experience in regulated or public-sector environments
• Third-party-risk assignments may additionally require a recognised vendor-risk, audit or privacy certification