Senior Security Consultant (CISO / GRC-as-a-Service)

About the role

We are seeking a senior security consultant to act as a virtual CISO and GRC‑as‑a‑Service advisor for an international IT & telecom provider. You will guide customers on strategy, governance and risk while collaborating with specialised security teams to deliver managed services.

Key responsibilities

• Design and implement cybersecurity policies and long‑term roadmaps aligned with each customer’s business model.
• Serve as a trusted advisor to C‑level executives, participating in board meetings and risk committees.
• Establish security governance structures, ensuring alignment between security, privacy and business continuity.
• Conduct risk analyses across IT, OT and IoT environments and translate findings for management.
• Navigate regulatory frameworks (e.g., NIS2, GDPR) and prepare customers for audits and ISO certifications.
• Oversee incident response, coordinate crisis communication and liaise with operational teams.
• Promote security awareness, produce risk and maturity reports, and act as the primary point of contact for all stakeholders.

Required profile

• Strategic thinker with the ability to quickly understand organisations and identify security gaps.
• Excellent communicator capable of translating complex threats into board‑level language.
• Bridge‑builder who can work across technical and business domains.

Required skills

• Deep knowledge of GRC frameworks: ISO 27001, NIST, CIS.
• Familiarity with legislation such as NIS2 and GDPR.
• Experience with IT Service Management (ITIL).
• Understanding of ICT architectures; knowledge of OT/ICS and IoT is a strong advantage.