GRC Cybersecurity Consultant — Policy & Audit Strategist

Quality & Reliability S.A. (QnR); Ohio; On-site; USD 90,000 - 130,000; Full time

Job summary

QnR Group's SysteCom unit seeks a Cybersecurity GRC Consultant to translate obligations into governance, policies and controls. You’ll develop risk treatment plans and roadmaps, and support audit readiness.

You’ll work on gap assessments, maturity reviews and reporting to leadership. Experience with ISO/IEC 27001, NIS2 and DORA is essential, with ability to articulate requirements to technical and executive audiences.

Qualifications

• Experience in cybersecurity governance, risk, compliance, audit or advisory work.
• Ability to interpret obligations and translate into controls and evidence.
• Strong policy, procedure, report and roadmap drafting skills.

Responsibilities

• Conduct gap assessments, maturity reviews and control evaluations.
• Develop policies, standards, risk-treatment plans and governance reports.
• Support NIS2, DORA, ISO/IEC 27001 and related compliance initiatives.
• Coordinate evidence, audits, remediation actions and stakeholder reporting.
• At senior levels, advise leadership on cybersecurity strategy and governance.

Skills

Cybersecurity governance

Audit & compliance

Education

Professional certifications (CISM/CISA/CRISC/CGRC/Lead Implementer/Auditor)

Tools

ISO/IEC 27001

Job description

QnR Group's SysteCom unit seeks a Cybersecurity GRC Consultant to translate obligations into governance, policies and controls. You’ll develop risk treatment plans and roadmaps, and support audit readiness.

You’ll work on gap assessments, maturity reviews and reporting to leadership. Experience with ISO/IEC 27001, NIS2 and DORA is essential, with ability to articulate requirements to technical and executive audiences.