Consultant GRC

We are looking to stably incorporate a Senior GRC Consultant. The work modality is in-person in Getafe. Main functions:

• Management and execution of GRC activities.
• Security governance, regulatory compliance, control framework, and technological risk.
• Participation in internal/external audits (ISO 27001, NIST, ENS, GDPR…).
• Preparation of executive reports and technical documentation.
• Coordination with the client’s global teams.
• Monitoring of action plans, KPIs, and security maturity.

Technologies and frameworks:

• Frameworks and standards: ISO 27001/27002, NIST CSF, ENS
• Regulation: GDPR
• Corporate GRC tools: Archer, ServiceNow GRC, OneTrust

Master in Cybersecurity or equivalent certifications (CISM, CISA, CISSP, ISO 27001 Lead Auditor, ENS, etc.)

Company Description Devoteam is a leading European consultancy focused on digital strategy, technological platforms, cybersecurity, and business transformation through technology. Technology is in our DNA, and we believe in it as a lever capable of driving change for improvement, maintaining a balance that allows us to offer our client portfolio top-level technological tools, but always with the closeness and professionalism of a team that acts as a guide along the way. Devoteam has been committed to technology in the service of people for over 25 years. With more than 10,000 people in the group, in 20 countries across Europe, the Middle East, and Africa.