Cybersecurity GRC Consultant

About the Role

We are seeking a highly motivated and skilled Cybersecurity GRC Consultant to join our dynamic Cybersecurity Department. In this pivotal role, you will play a critical part in enhancing our Governance, Risk, and Compliance (GRC) framework, ensuring robust cybersecurity practices, and fulfilling regulatory requirements set forth by the National Cybersecurity Authority (NCA). Your expertise will be instrumental in strengthening our organization’s security posture while aligning with industry best practices and compliance standards.

Key Responsibilities

As a Cybersecurity GRC Consultant, your responsibilities will encompass a broad spectrum of activities designed to fortify our cybersecurity governance, risk management, and compliance initiatives. You will collaborate closely with the Cybersecurity Department to:

• Provide comprehensive support across all Governance, Risk, Compliance, and Cybersecurity Awareness initiatives, ensuring alignment with organizational objectives and regulatory mandates;
• Operate and optimize GRC and cybersecurity processes to enhance efficiency, reduce vulnerabilities, and mitigate risks effectively;
• Contribute to the fulfillment of NCA-related requirements, ensuring timely and accurate compliance with national cybersecurity regulations;
• Assist in the development, implementation, and maintenance of policies, procedures, and controls that uphold our cybersecurity framework;
• Conduct risk assessments, gap analyses, and audits to identify areas for improvement and recommend strategic solutions;
• Facilitate cybersecurity awareness programs to foster a culture of security consciousness among employees and stakeholders;
• Support incident response efforts and coordinate with relevant teams to address security incidents and compliance breaches;
• Stay abreast of emerging cybersecurity threats, regulatory changes, and industry trends to proactively adapt our GRC strategies.

Qualifications & Experience

To excel in this role, you must possess a strong academic background and hands-on experience in cybersecurity, coupled with recognized professional certifications. The ideal candidate will meet the following criteria:

• A Bachelor’s degree in Computer Science, Computer Engineering, or a closely related field;
• Three to five years of progressive experience in cybersecurity, with a focus on GRC, risk management, or compliance;
• Professional cybersecurity certifications that demonstrate your expertise and commitment to the field. Accepted certifications include:
• From ISC2: CISSP (Certified Information Systems Security Professional), CCSP (Certified Cloud Security Professional), or equivalent;
• From ISACA: CRISC (Certified in Risk and Information Systems Control), CISM (Certified Information Security Manager), or equivalent;
• Offensive Security: OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), OSEP (Offensive Security Experienced Penetration Tester), or other relevant certifications;
• Strong analytical, problem-solving, and communication skills, with the ability to articulate complex technical concepts to non-technical stakeholders;
• A proactive mindset with a passion for continuous learning and staying ahead of evolving cybersecurity threats and regulations.