senior governance, risk & compliance (grc) consultant @thessaloniki

As a Senior Consultant within our Governance, Risk & Compliance (GRC) team, you will play a pivotal role in supporting clients in identifying, assessing, and managing risks that may impact their business objectives. You will work across diverse projects, collaborating with cross-functional teams and acting as a trusted advisor to clients. You will leverage your expertise to translate regulatory requirements, business objectives, and emerging cyber risks into effective governance frameworks, practical risk management solutions, and resilient operating models, while leading the delivery of high-quality engagements that strengthen clients’ cybersecurity and technology risk posture.

As part of your role, you will:

• Tailored to clients’ needs, risk profiles, and business objectives.

• Including vulnerability identification, control effectiveness, risk analysis, and risk quantification, providing actionable recommendations.

• IEC 62443, supporting compliance with legal and regulatory obligations.

• Including policies, standards, methodologies, controls, and governance structures.

• Strengthening detection, response, recovery, and overall cyber resilience.

• Including BIA, continuity strategies, recovery planning, crisis management, and testing.

• By evaluating critical services, processes, technology dependencies, third parties, and recovery capabilities.

• Including governance structures, policies, roles and responsibilities, risk assessments, controls, and oversight mechanisms.

• Including AI risk classification, data and model governance, security, and third-party risks.

• Translating complex cyber and technology risks into practical business solutions.

• Helping clients address emerging risks.

• Providing technical guidance, reviewing deliverables, and supporting professional development.

• To deliver integrated cybersecurity, risk, compliance, AI, and resilience solutions.

• Translating relevant developments into actionable client insights.

#OurRequirements

We are seeking experienced, driven professionals who are ready to take ownership of complex client challenges and deliver impactful cybersecurity solutions. The Senior Consultant role is ideal for professionals with proven expertise in cybersecurity strategy, risk management, compliance, and governance, combined with strong leadership and stakeholder-management skills.

Key Qualifications

• Academic background (BSc/MSc) related to Information Technology, Computer Science, Cybersecurity, or any other IT related major.

• 2+ years of relevant working experience.

• Solid professional experience in cybersecurity strategy, risk management, compliance, and governance.

• Strong knowledge of cybersecurity frameworks, risk quantification methodologies including DORA, NIS2, ISO, IEC standards, and related regulatory requirements.

• Proven ability to manage multiple stakeholders, engage effectively with executive leadership, and communicate complex cybersecurity concepts clearly to both technical and non-technical audiences.

• Demonstrated experience in leading project teams, managing client engagements, and mentoring junior colleagues.

• Strong analytical and problem-solving skills, with a proactive, results-oriented mindset.

• Excellent interpersonal, communication, and client relationship management skills.

Bonus Qualifications

• Relevant professional certifications such as CISSP, CISM, CIPP/E, ISO 27001 Lead Auditor/Implementer, CCSK, CCSP, advanced cloud certifications across AWS, Microsoft Azure, and Google Cloud.

• Familiarity with ServiceNow GRC, RSA Archer, OneTrust or PowerBI is a plus.

• Advanced expertise in IT and OT risk assessments, third-party risk management, and cybersecurity maturity assessment.

• Hands-on experience in the development, implementation, and testing of Incident Response Plans.

• Strong knowledge of cloud security principles and architecture across leading cloud platforms, including AWS, Microsoft Azure, and Google Cloud.

• Proficiency in German or French is considered a strong advantage.

#WhatWeOffer

At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits:

•  Modern hybrid workplace, characterized by flexibility and Smart Working

• Empowered well-being: We provide multiple program offerings to support your well-being needs (flexible working arrangements, extra days of leave, parental allowances)

• Engagement within international large-scale teams and projects, with opportunities to travel for training or client purposes.

• Constant opportunities for learning with unlimited access to internal and external learning platforms and sponsored certificates aligned with business needs and technology trends

• Challenging and innovating environment where personal development and growth are encouraged, always with transparency and trust

• Diverse culture and active communities that enable you to bring yourself to work

• Team Building and Corporate Social Responsibility Activities

• A buddy to support you with your onboarding

• Extra days of annual leave

• Private medical health insurance plan

• Ticket restaurant card

• Exclusive Discounts to several retail providers, restaurants and others

• Mobile phone

• Fresh fruits and unlimited coffee everyday at our offices

Please note that all the well-being benefits mentioned above are subject to annual review