GRC Consultant

If your answer ticks all the boxes, this could be the start of a great collaboration.

• You have a curious mind - You won't understand what we're talking about if you don't 🤔
• You want to learn more around technology - You won't survive if you don't 😱
• You want to make the world a bit better 😇

We happen to be just like that as well. We like hacking things here and there (you included) and create scalable solutions that bring value to the world.

We use state-of-the-art technology to build solutions for our customers and our partners' customers. We make sure we stay best-in-class by participating in research projects across Europe, collaborating with top universities and enterprises on AI, Data, and Cloud.
About QnR Group

SquareDev is a member of the QnR Group, a leading technology organization specializing in end-to-end custom software solutions, Artificial Intelligence, Cybersecurity, SAP, ServiceNow and FinTech solutions.

As part of QnR Group's ongoing expansion — both in Greece and internationally — we are continuously hiring across a wide range of tech roles. Successful candidates may be hired by QnR Group, or another company within the Group, depending on the role and project.

We are looking for a Cyber Security Governance / Risk / Compliance Consultant to support organizations in building governance, risk management and regulatory compliance capabilities. You will work on regulatory frameworks, risk assessments, audits, operating models and executive advisory. The successful candidate will be hired by SysteCom.

The ideal candidate will be responsible for:

• Perform cybersecurity risk assessments and maturity assessments.
• Support compliance programs (NIS2, DORA, etc.).
• Support the design and maintenance of an ISMS aligned with ISO 27001 and Business Continuity Management Systems (BCMS) aligned with ISO 22301.
• Support Business Impact Analysis (BIA), RTO/RPO definition and continuity strategy development.
• Support the design and facilitation of crisis management simulations, tabletop exercises and cyber incident drills.
• Support the development of policies, procedures and governance frameworks.
• Support audits, remediation planning and regulatory engagement.
• Support workshops and assist in executive presentations.
• Support third-party risk and operational resilience programs.

To excel in this role, you'll need:

• 2+ years of experience in GRC, risk, audit or consulting roles.
• Strong understanding of cybersecurity governance and regulatory frameworks.
• Excellent documentation and communication skills.
• Ability to work with executives and technical teams.

Nice to have:

• Experience in implementing Information Security & Business Continuity Management Systems.
• Experience in Crisis Management Simulation exercises.
• Certifications (CISSP, CISM, CRISC, CISA, ISO 27001 & ISO 22301 Lead Implementer / Auditor).
• Regulatory exposure (financial services, telecom, critical infrastructure).