Cyber Security Consultant (GRC)

Are you a Cyber Security Consultant ready to protect and shape the digital ecosystem of a leading Information Resilience and Cyber Security organization? Join a high-performing team at the forefront of digital transformation, guiding clients through complex regulatory landscapes, building state-of-the-art Information Security Management Systems, and revolutionizing how businesses achieve compliance and risk resilience.

• Consulting & Regulatory Compliance: Undertake consultancy projects covering Information Security Management, Risk Assessment, Information Classification, Security Awareness, and compliance with EU/Greek regulatory frameworks as well as international standards (ISO/IEC 2700x, ISO 22301, PCI-DSS, GDPR).
• Framework Assessment & Audit: Assess client environments against frameworks like GDPR, ISO 27001/2, ISO 20000, and ISO 22301 by conducting document reviews, stakeholder interviews, and technical gap analyses.
• Risk Management & Deliverables: Lead customer risk management and formalized risk analysis engagements, developing actionable recommendations to remediate compliance gaps and authoring comprehensive deliverable reports.
• Methodology & Innovation Hub: Participate in the internal Innovation Hub to create standardized templates, policies, standards, and procedures, transferring knowledge across project teams to elevate delivery quality.
• Pre-Sales & Advisory Support: Assist pre-sales activities by explaining service offerings, scoping client projects, drafting time/cost estimates, and authoring Statements of Work (SOW) and proposals.
• Technical Solution Integration: Gain familiarity with technical security solutions and integrate this technical knowledge directly into management system consultancy.

• Standards & Frameworks: Hands-on experience with the implementation or assessment of at least two core standards: ISO/IEC 27001, ISO 22301, PCI-DSS, or GDPR.
• Risk & Policy Expertise: Deep understanding of business processes, cybersecurity best practices, formalized risk analysis methodologies, and policy documentation.
• Pre-Sales & Technical Writing: Excellent technical writing skills (reports, proposals, documentation) and strong presentation capabilities to communicate complex concepts to clients and stakeholders.
• Education & Experience: University degree in an IT-related subject (specialization or Postgraduate degree in ICT / Information Security is a plus) alongside 2+ years of experience in cybersecurity consulting or a related field.
• Certifications (Highly Desirable): Professional credentials such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, or ISO 27001 Lead Implementer.
• Languages & Soft Skills: Advanced proficiency in English (written and spoken), strong analytical skills, adaptability, and time management capabilities.

2+ years of experience

Have some questions first? Contact Maria Hadjichristodoulou at 6952381381 from Monday to Friday. Otherwise, feel free to contact me at mhadjichristodoulou@randstad.gr

Please note that for transparency and equity reasons, only those applications made online via our site will be assessed. After the screening of all the CVs received, we will only contact the candidates who meet the requirements of the job to arrange an interview. All applications are considered strictly confidential.