grc expert

At Publicnext, we are strengthening our cybersecurity governance, risk, and compliance (GRC) function and looking for a GRC Expert to join the team. Working closely with and reporting directly to the CISO, you will help us mature our risk management and resilience across cybersecurity, privacy, business continuity, AI compliance, and third-party risk.

This is a hands-on delivery role with real ownership. You will run assessments, maintain our risk and compliance posture against recognized frameworks, and support the growing intersection of GRC and IT contract management, reviewing business terms, shaping governance and SLAs, and ensuring our internal and third-party arrangements meet our standards.

Responsibilities:

• Develop and maintain cybersecurity policies, standards, and procedures aligned to recognized frameworks and regulations (NIST CSF, GDPR, NIS2, PCI DSS, EU AI Act).

• Facilitate cybersecurity and technology risk assessments; maintain risk registers and track remediation activities to closure.

• Participate in risk assessments, vulnerability assessments, and gap analyses, and translate findings into practical improvement plans.

• Support compliance initiatives including DPIAs, TPRAs (Third-Party Risk Assessments), and EU AI Act readiness.

• Coordinate and support internal and external audits and Cyber Insurance audits.

• Oversee third-party cybersecurity risk management processes, ensuring internal teams and vendors adhere to our standards.

• Review contracts' business terms and highlight areas for improvement.

• Contribute to the design of governance and SLAs for contract management.

• Support the legal and partner interface on contracts, NDAs, and Technical & Organizational Measures (TOMs).

• Take ownership of delivery within your assigned workstreams and deliverables, ensuring quality and timely execution.

• Participate in the project management of ongoing GRC engagements.

• Provide time and effort estimates for prospective engagements and contribute to the technical writing of proposals and offers.

• Facilitate training sessions and workshops to drive cybersecurity awareness across the organization.

• Communicate clearly with technical specialists, business leaders, and legal/compliance stakeholders.

Requirements:

• 2-4 years of experience in cybersecurity, information security, compliance, or GRC-related functions.

• Solid understanding of cybersecurity frameworks and regulatory requirements (NIST CSF, GDPR, NIS2, PCI DSS, EU AI Act).

• Experience supporting audits, assessments, and control-maturity activities.

• Familiarity with IT project management principles and related methodologies.

• Experience with or exposure to IT contract management (reviewing terms, SLAs, governance).

• Strong analytical and problem-solving abilities.

• Ability to communicate technical and cyber-risk concepts to both technical and non-technical audiences, including executives.

• Strong stakeholder management and cross-functional collaboration skills.

• A team player who supports and helps drive common goals.

• Languages: Greek and English (both required, written and spoken).

• Professional certifications such as ISO 27001 Lead Auditor (ISO27001-LA), CISM, CISA, or similar.

• Experience working within regulated environments.

• Prior exposure to Contract Management roles or IT business-facing roles.

What we offer:

• 💼 Competitive compensation & benefits package

• 💰 Performance-based bonus scheme

• 🧑‍⚕️ Comprehensive life & health insurance

• 🏡 Flexible hybrid working model – to support your work-life balance

• 🧡 Psychological support via a professional helpline for you and your family

• 🚀 Career growth opportunities in a role that evolves with you

• 🎉 Valuable experience in a well-known and fast-growing organization

• 📚 Continuous learning and upskilling through tailored programs

• 🏃🏽‍♂️ Employee Wellness Program – office Pilates & sports teams (padel, football, volleyball & more)

• 🚗 Alternative transportation with company shuttle buses to our offices

• 📲 Exclusive access to our employee app, OrangeGen, packed with tools, news & perks