- Company Name
- Scalian
- Job Title
- Consultant Cybersécurité - GRC (Gouvernance, Risques & Conformité) - H/F
- Job Description
-
**Job Title**
Cybersecurity Consultant – Governance, Risk & Compliance (GRC)
**Role Summary**
Lead GRC activities for clients across diverse sectors. Conduct risk assessments, design and maintain governance frameworks, support regulatory compliance projects, and facilitate internal/external audits. Collaborate closely with business units and security teams to embed GRC practices into operational processes.
**Expectations**
- Minimum 3 years of proven GRC, audit, or information‑security experience.
- Practical knowledge of GRC standards, regulations, and frameworks (e.g., ISO 27001, NIST, GDPR, PCI‑DSS, ISO 31000).
- Strong analytical, synthesis, and written communication skills.
- Able to work autonomously and manage multiple client engagements.
**Key Responsibilities**
1. Perform comprehensive risk analyses (IT, business, cyber, organizational).
2. Design, implement, and monitor GRC tools and controls.
3. Advise on and lead regulatory compliance projects for standards such as GDPR, ISO 27001, PCI‑DSS.
4. Participate in internal and external audit preparation, execution, and remediation plan follow‑up.
5. Conduct GRC awareness and training sessions for stakeholders.
6. Continuously refine GRC processes and methodologies to improve efficiency and effectiveness.
**Required Skills**
- Risk assessment and mitigation methodology.
- Governance & compliance framework development.
- Audit planning and execution (internal & external).
- Documentation: policy writing, risk registers, audit reports.
- Stakeholder engagement and change‑management.
- Proficiency with GRC software (e.g., RSA Archer, MetricStream).
**Required Education & Certifications**
- Bachelor’s or Master’s (Bac+4/5) in Computer Science, Cybersecurity, Information‑Security, Risk Management, or related field.
- Professional certifications are desirable: CISSP, CISM, CRISC, ISO 27001 Lead Auditor, or equivalent.
---