GRC & AI Governance Consultant

Employers from Greece; United States; Remote; USD 120,000 - 165,000; Full time

Benefits offered by this job

Competitive salary

Continuous learning

Equipment provided

No dress code

Professional development

Job summary

AI2CYBER is seeking a GRC & AI Governance Consultant to support client engagements and product governance. You will perform risk assessments, policy development, and control reviews, while guiding AI governance including inventories, ownership and approval processes.

Role requires strong English and Greek communication, with experience in GDPR/NIS2 and ISO 27001. Collaborative work with engineering, privacy, and legal teams is central to delivering actionable findings and closure.

Qualifications

• 3+ years in GRC, information security consulting, or IT audit.
• Practical ISO 27001 experience including risk assessments and control reviews.
• Experience documenting findings and following corrective actions to closure.
• Working knowledge of GDPR and familiarity with NIS2.
• Understanding of AI/generative AI risks and relevant controls.
• Ability to manage deliverables with diverse stakeholders in English and Greek.

Responsibilities

• Lead risk assessments, policy development and control design reviews.
• Coordinate audit preparation and track corrective actions to closure.
• Govern AI governance frameworks including inventories and approval processes.
• Collaborate with engineering, privacy and legal teams on evidence and controls.
• Present risks and remediation recommendations to management with priorities.

Skills

GRC experience

ISO/IEC 27001

AI governance

English & Greek fluency

Job description

at AI2CYBER

AI2CYBER develops cybersecurity products and delivers security services across cyber threat intelligence, application security and AI-enabled security operations.

We are looking for a GRC & AI Governance Consultant to support client engagements and our own products and services. Your work will cover risk assessments, policies, control reviews and audit preparation, alongside the governance of AI systems and their use.

You will take responsibility for assigned assessments and deliverables, work directly with technical and business teams, and help control owners address findings through to closure.

Requirements

• Develop and maintain ISO/IEC 27001 policies and processes, including risk assessments, risk treatment plans and Statements of Applicability.
• Assess control design and operating effectiveness, evaluate audit evidence and verify the completion of corrective actions.
• Maintain risk registers, document exceptions and residual risks, and prepare recommendations for accountable risk owners.
• Support GDPR, NIS2 and EU AI Act gap assessments, mapping applicable requirements to controls and evidence in collaboration with technical, privacy and legal specialists.
• Contribute to AI governance frameworks and ISO/IEC 42001 implementation, including AI inventories, risk and impact assessments, ownership, acceptable-use policies and approval processes.
• Work with engineering teams to define AI controls covering data quality and protection, access and agent permissions, human oversight, transparency, logging and change management.
• Review AI evaluation and security-test evidence against agreed acceptance criteria before deployment and after material changes. Coordinate periodic reassessments and track actions arising from control gaps and incidents.
• Assess cloud and AI providers, including security assurances, data retention, use of customer data for model training and management of material service changes.
• Present significant risks, control weaknesses and overdue actions to management, with clear recommendations and priorities.

What we are looking for

• At least three years of experience in GRC, information security consulting, IT audit or a related discipline.
• Practical experience applying ISO/IEC 27001, including risk assessments and control reviews.
• Experience evaluating evidence, documenting findings and following corrective actions through to completion.
• Working knowledge of GDPR and familiarity with NIS2.
• An understanding of common AI and generative AI use cases, with the ability to identify relevant risks and discuss appropriate controls.
• The ability to manage your deliverables, work constructively with technical and business stakeholders, and communicate clearly in English and Greek.

Additional experience we would value

• Participation in AI governance, AI risk assessment or AI supplier evaluation projects.
• Familiarity with ISO/IEC 42001, ISO/IEC 23894, the NIST AI Risk Management Framework or the OWASP Top 10 for LLM Applications.
• Experience with SaaS products, cloud environments or organisations in regulated sectors.
• Relevant certifications, such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM or AIGP.

You will work with the teams building and operating the systems you assess, giving you the opportunity to see your recommendations implemented and evaluate their effectiveness. The combination of product work and client engagements offers practical experience across different technologies and risk environments.

Benefits

• Highly competitive salary reviewed upwards on a regular basis.
• Participation in state-of-the-art project and tech challenges and participation in large-scale projects.
• Personal and professional development, amongst industry experts and talented people.
• Continuous learning, having access to board resources.
• Equipment support so you have all the tools to do effectively and efficiently your work.
• No dress code as we want you to be as comfortable as possible.

AI2CYBER is a cybersecurity company building advanced AI-driven solutions for vulnerability discovery, secure software development, offensive security automation, and cyber risk reduction.

We operate at the intersection of cybersecurity, artificial intelligence, software engineering, and automation. Our mission is to help organizations identify, understand, prioritize, and remediate security weaknesses faster and more effectively.

This is a full-time position with competitive salary and benefits. If you are looking for an exciting opportunity to work with cutting-edge technology, we would love to hear from you!

Note: All applications will be treated with strict confidentiality.

Requirements

This position in available only for Greek residents.