Cybersecurity Consultant – GRC (Governance, Risk & Compliance)

About the role

We are seeking a seasoned Cybersecurity Consultant with over ten years of experience to lead and coordinate strategic security initiatives across the organization. The role focuses on governance, risk and compliance (GRC) programs, ensuring alignment with business objectives and regulatory requirements.

Key responsibilities

• Lead and coordinate cybersecurity projects such as ISO 27001 compliance, NIS2 readiness, IAM/PAM deployment, SOC implementation, cloud security and data‑protection initiatives.
• Define project scopes, objectives and deliverables that meet business and regulatory standards.
• Conduct risk assessments, maturity reviews and develop remediation plans.
• Develop and maintain governance frameworks, policies and procedures aligned with ISO 2700x, CIS, NIST, GDPR and other international standards.
• Manage stakeholders, budgets, timelines and cross‑functional security teams.
• Provide guidance on best practices, audit preparation and third‑party risk management.
• Report project progress, KPIs and risk posture to senior management.

Required profile

• Master’s degree or equivalent in Cybersecurity, Information Systems or related field.
• 10+ years of experience in cybersecurity consulting or security program management.
• Strong knowledge of GRC frameworks and regulatory requirements.
• Proven experience delivering IAM/PAM, SOC/SIEM, cloud security or compliance projects.
• Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, PMP or PRINCE2 are a plus.
• Excellent leadership, communication and stakeholder‑management skills.
• Fluency in English and French.

Required skills

• ISO 27001 compliance
• NIS2 readiness
• Identity and Access Management (IAM) / Privileged Access Management (PAM)
• Security Operations Center (SOC) implementation and SIEM
• Cloud security
• Data‑protection and privacy frameworks (GDPR)
• Risk assessment and maturity review methodologies
• Governance frameworks (ISO 2700x, CIS, NIST)