Information Security Manager/GRC Consultant

Overview

In this GRC Consultant role, you will safeguard the organization by maintaining and enhancing the ISMS and GRC frameworks. You’ll collaborate with the Information Security Steering Team and cross-functional partners to ensure regulatory compliance and resilience against evolving threats. You will audit against TSA and other standards, assess project risks, and drive security awareness and improvement initiatives. This is a hands-on, impact-driven position at a global tech services leader, offering growth through learning and cross-team collaboration.

Pay / Benefits

• Tailored benefits for wellbeing
• Learning and development opportunities
• Flexible work options

Responsibilities

• Maintain the Information Security Management System (ISMS) in line with ISO 27001
• Audit against the Telecommunications Security Act (TSA) and other applicable standards
• Analyze internal projects to identify risks and define compensatory measures
• Prepare and present information security reports highlighting areas for improvement
• Manage and update the information security awareness platform content for employees and key suppliers
• Research and recommend security enhancements and improvements

Key requirements

• Significant experience in Information Security and GRC
• Strong understanding of risk management methodologies and international security standards (ISO 27001, NIST, TSA)
• Familiarity with EU GDPR
• Experience maintaining and auditing ISMS per ISO 27001
• Customer service-oriented with ability to build strong stakeholder relationships
• Analytical and creative thinking with ability to identify pragmatic solutions
• Ability to organize daily work and delegate where necessary

• Customer service orientation
• Analytical thinking
• Creative problem solving
• ISO 27001
• NIST
• TSA

…