grc & privacy consultant

Our client is a leading Greek company specializing in information management and digital transformation. It provides solutions for document management, intelligent data processing, and secure information storage. Through advanced technologies and automation, the company helps organizations optimize workflows, ensure compliance, and improve operational efficiency across industries.

Language Requirement: English, Greek

Minimum Years of Experience: 3

Key Responsibilities

• Participate in client discovery sessions and workshops to understand business requirements, current operating models and GRC & Privacy needs.

• Perform structured assessments and analysis across GRC & Privacy processes, operating models and capabilities.

• Contribute to the design of governance models, policies, processes, controls and implementation roadmaps based on client requirements.

• Translate GRC, Privacy and business requirements into functional requirements, workflows and technology configurations.

• Contribute to solution design across areas such as risk and compliance management, controls, assessments, third-party risk, policy management and privacy operations.

• Perform hands-on configuration and implementation of GRC & Privacy technology platforms, primarily OneTrust.

• Configure workflows, assessments, control and risk libraries, forms, business rules, dashboards and reporting based on client requirements.

• Support integrations, data migration and other technical implementation activities where required.

• Execute testing and support UAT, deployment and operational readiness activities.

• Produce high-quality project deliverables including process flows, assessments, policies, procedures, control mappings and operational documentation.

• Take ownership of assigned implementation activities and deliverables, working closely with senior consultants and delivery leads.

• Contribute to pre-sales activities including solution presentations, platform demonstrations, scoping and effort estimation.

• Contribute to RFP/ RFI responses and the preparation of solution proposals.

• Contribute to GRC & Privacy methodologies, implementation accelerators, reusable assets and service offerings.

Required Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Systems, Engineering, Business, Law or a related field.

• 3+ years of relevant experience in GRC & Privacy or related technology consulting roles, ideally within a consulting firm, technology provider or enterprise environment.

• Good knowledge of GRC & Privacy concepts, processes and operating models, including governance frameworks, controls, assurance and privacy operations.

• Good understanding of relevant regulatory and industry frameworks such as GDPR, ISO 27001, ISO 27701, NIST, NIS2, DORA and SOC 2.

• Experience with GRC & Privacy technology platforms such as ServiceNow IRM/GRC, RSA Archer, OneTrust or equivalent solutions, including exposure to hands-on configuration or implementation activities.

• Strong analytical and solution-design skills, with the ability to translate business and regulatory requirements into processes, workflows and technology configurations.

• Proven consulting and client-facing skills, including participation in workshops, presentations and stakeholder interactions.

• Ability to take ownership of assigned implementation activities and deliver high-quality outputs within agreed timelines.

• Strong communication and collaboration skills, with a structured approach and willingness to develop within a growing, high-impact service line.

• OneTrust experience and relevant certifications in GRC, information security or privacy will be considered an advantage.

Nice-to-Have Skills

• Exposure to privacy, information security, risk or compliance projects within complex organizational environments.

• Familiarity with process improvement and digital transformation initiatives related to governance, risk or privacy.

• Experience working with cross-functional teams involving business, technology, legal or security stakeholders.

• Understanding of data management and information lifecycle concepts in a GRC or Privacy context.

• Exposure to additional GRC, Privacy or information security tools, methodologies or industry practices beyond the platforms and frameworks listed above.

Salary (Ind.): 2500-3000 € / Per month Gross

Upon further discussion with our client.