What We Are Looking For (Requirements):

Master's degree (Level 7) or equivalent qualification in Cybersecurity, Information Security, Information Technology, Law, Risk Management, or a related discipline.

Minimum 9 years of relevant professional experience within cybersecurity, information security, governance, risk, compliance, or privacy domains.

Minimum 8 years of experience in a similar Cybersecurity GRC, Risk Management, Compliance, or Information Security Governance role.

English proficiency at C1 level or higher.

Certifications

Candidates must hold at least four of the following internationally recognized certifications (or accepted equivalents):

CISA (Certified Information Systems Auditor)

CISM (Certified Information Security Manager)

CRISC (Certified in Risk and Information Systems Control)

CISSP (Certified Information Systems Security Professional)

CGRC (Certified in Governance, Risk and Compliance)

CSSLP (Certified Secure Software Lifecycle Professional)

CCSP (Certified Cloud Security Professional)

CISSP-ISSMP

GSNA (GIAC Systems and Network Auditor)

GCCC (GIAC Critical Controls Certification)

GIAC Certified ISO-27000 Specialist

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

ISO 27005 Risk Manager

Technical Expertise

Strong knowledge of cybersecurity laws, regulations, and legislative requirements.

Deep understanding of cybersecurity standards, frameworks, methodologies, and best practices.

Knowledge of cybersecurity governance, risk management, and compliance principles.

Understanding of privacy impact assessment frameworks, methodologies, and regulatory obligations.

Proven experience in cybersecurity GRC environments, with a strong focus on cybersecurity risk management.

Demonstrated experience designing, implementing, or operationalising cyber risk management frameworks.

Hands-on experience with ServiceNow GRC (IRM, Risk, Policy & Compliance modules).

Experience maintaining and managing cybersecurity risk registers.

Strong understanding of integrating risk management processes with vulnerability management, incident management, cloud risk, and third-party risk programmes.

Experience contributing to cybersecurity maturity assessments and improvement initiatives.

What We Offer:

Prestigious projects within European institutions.

International, innovative, and multicultural environments.

Continuous support from a team of experts in EU projects.

Rate: 476,55€ per day

If you are ambitious, enthusiastic, and seeking a new professional challenge in international projects with real-world impact, this is the place for you!

In accordance with Organic Law 3/2007 of March 22, the company is committed to promoting the defense and effective application of the principle of equality between men and women, preventing any type of labor discrimination based on sex, and guaranteeing equal entry opportunities. Furthermore, we promote diversity and reject any discrimination based on race, gender, functional diversity, religion, sexual orientation, gender identity, or any other personal or social condition, striving to build an inclusive and enriching environment.