> Markdown version of [/jobs/ext/4022066-grc-senior-consultant](https://www.wearedevelopers.com/jobs/ext/4022066-grc-senior-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Grc Senior Consultant

- **Company:** Thales Group
- **Location:** Álava, Spain
- **Contract:** Permanent contract
- **Skills:** Cyber Security, PCI Data Security Standards, National Institute of Standards and Technology Cybersecurity Framework
- **Published:** October 30, 2026
- **Apply:** https://www.buscojobs.com.es/grc-senior-consultant-en-alava-ID-378623423

## About the Role

Compensaciones / Beneficios * Define scope of cybersecurity assessments and audits with regulatory alignment * Review technical documentation, policies, and control frameworks * Conduct stakeholder interviews and collect evidence for assessments * Identify compliance gaps and provide remediation guidance * Advise clients on information security standards and best practices * Participate in GRC projects across PCI DSS, NIST CSF, ISO *****, ENS, ISO *****, GDPR, NIS2, DORA * Prepare reports, findings and project deliverables * Coordinate and manage cybersecurity and GRC projects with cross-functional teams * Contribute to development and improvement of GRC products and services * Proactively address client challenges to improve governance and risk processes * Maintain a proactive, autonomous working style and strong communication with stakeholders Responsabilidades * A higher technical degree in Engineering, IT, Telecommunications or a related field * At least 5 years of
cybersecurity experience, including 3+ years in GRC * Solid knowledge of cybersecurity principles and technologies * Experience with security and compliance frameworks/regulations (ISO *****, NIST CSF, PCI DSS, ENS, ISO *****, GDPR, NIS2, DORA) * Knowledge of cybersecurity technologies and deployment projects * Experience in project management, team coordination and stakeholder management * Professional proficiency in English (written and spoken) * Strong analytical, interpersonal and communication skills * Proactive, autonomous work style, critical thinking and problem-solving * Collaborative mindset and commitment to continuous improvement * Creativity in practical cybersecurity and compliance solutions Requisitos principales *

## Description

Experteer Overview In this role you will lead cybersecurity assessments, audits, and GRC projects across key frameworks (ISO *****, NIST CSF, GDPR, NIS2, DORA, PCI DSS, ENS, ISO *****), advising clients on compliance and security governance.You will engage with stakeholders across multidisciplinary teams and contribute to the evolution of GRC services.This position blends cybersecurity expertise with consulting, project coordination and client-facing responsibilities in a hybrid Bilbao/Vitoria area setup.You will help organizations strengthen their security posture and risk management in a dynamic regulatory landscape.Compensaciones / Beneficios * Define scope of cybersecurity assessments and audits with regulatory alignment * Review technical documentation, policies, and control frameworks * Conduct stakeholder interviews and collect evidence for assessments * Identify compliance gaps and provide remediation guidance * Advise clients on information security standards and best practices * Participate in GRC projects across PCI DSS, NIST CSF, ISO *****, ENS, ISO *****, GDPR, NIS2, DORA * Prepare reports, findings and project deliverables * Coordinate and manage cybersecurity and GRC projects with cross-functional teams * Contribute to development and improvement of GRC products and services * Proactively address client challenges to improve governance and risk processes * Maintain a proactive, autonomous working style and strong communication with stakeholders Responsabilidades * A higher technical degree in Engineering, IT, Telecommunications or a related field * At least 5 years of cybersecurity experience, including 3+ years in GRC * Solid knowledge of cybersecurity principles and technologies * Experience with security and compliance frameworks/regulations (ISO *****, NIST CSF, PCI DSS, ENS, ISO *****, GDPR, NIS2, DORA) * Knowledge of cybersecurity technologies and deployment projects * Experience in project management, team coordination and stakeholder management * Professional proficiency in English (written and spoken) * Strong analytical, interpersonal and communication skills * Proactive, autonomous work style, critical thinking and problem-solving * Collaborative mindset and commitment to continuous improvement * Creativity in practical cybersecurity and compliance solutions Requisitos principales *