Senior GRC Consultant | Cybersecurity Strategy & Advisory Services

Senior Security Engineer (GRC & Advisory)

Key Responsibilities

• Lead

  Governance, Risk, and Compliance (GRC)

  engagements, including assessments, frameworks, and implementation.
• Develop and maintain

  security strategies, roadmaps, and policies

  aligned with industry standards and client objectives.
• Provide

  advisory services

  on risk management, regulatory requirements, and cybersecurity best practices.
• Conduct

  risk assessments, gap analysis, and compliance audits

  (ISO 27001, NIST, GDPR, PCI-DSS, etc.).
• Design and implement

  enterprise-wide security governance frameworks

  to strengthen organizational resilience.
• Engage with C-level stakeholders to translate security risks into

  business impact and strategic recommendations

  .
• Collaborate with internal/external teams to ensure

  effective incident response, business continuity, and risk mitigation

  .
• Stay up to date with emerging threats, regulations, and security technologies to proactively guide clients.

Qualifications & Skills

• Bachelors or Masters degree in

  Information Security, Cybersecurity, Computer Science, or related field

  .
• 7+ years of experience in

  Cybersecurity GRC, Risk Management, and Security Advisory roles

  .
• Strong knowledge of

  governance frameworks and standards

  (ISO 27001, NIST, COBIT, PCI-DSS, GDPR, CSA, etc.).
• Experience in

  developing security strategies, policies, and compliance roadmaps

  .
• Proven ability to

  engage with senior executives and deliver high-impact advisory services

  .
• Excellent communication, presentation, and stakeholder management skills.
• Relevant certifications preferred:

• CISM, CISSP, CRISC, CISA, ISO 27001 Lead Implementer/Lead Auditor, CGEIT

  .