JobCubby JobCubby
Sign up
BE

GRC Lead — Governance, Risk & Compliance (Cybersecurity)

BE Bucharest, Romania

Marketing Services · 51-200 employees

6 h ago
security Senior (5-10 yrs) Full-time Romania
Log in to apply, save this posting, or score it against your profile with AI.

About the role

Lead the cybersecurity governance, risk, and compliance program while managing the Information Security Management System (ISMS) according to ISO 27001 standards. Facilitate risk assessments, conduct compliance audits, and provide subject matter expertise on global regulations like GDPR and NIS2.

What they look for

Governance, Risk & Compliance GDPR NIS2 ISO 27001 Information Security Policy Procedure Development NIST Cybersecurity Framework Privacy Management Risk Assessment Compliance Audits Gap Analysis Incident Response Data Protection Security Controls Project Management

Requirements

Requires extensive experience in developing and maintaining information security frameworks, policies, and procedures. Candidates must possess deep knowledge of cybersecurity regulations and the ability to communicate risk and compliance strategies to technical and business stakeholders.

Full description

Core Competencies

Primary Skills

  • Governance, Risk & Compliance (GRC)
  • GDPR
  • NIS2
  • ISO 27001
  • Information Security Policy and Procedure Development

Secondary Skills

  • NIST Cybersecurity Framework (NIST CSF)
  • Privacy Management

Responsibilities

  • Lead the cybersecurity governance, risk, and compliance (GRC) program, working closely with Legal, Privacy, Risk Management, and Government Affairs teams to address evolving regulatory requirements.
  • Establish, implement, and continuously improve the Information Security Management System (ISMS) in accordance with ISO 27001/27002 standards.
  • Develop, maintain, and enhance information security, privacy, data protection, incident response policies, standards, procedures, and governance frameworks.
  • Manage an enterprise-wide cybersecurity and risk program to protect the confidentiality, integrity, and availability of information assets.
  • Conduct risk assessments, facilitate risk management activities, and support business units in identifying and mitigating security and compliance risks.
  • Provide subject matter expertise on global cybersecurity and privacy regulations and frameworks, including GDPR, NIS2, ISO 27001/27002, and NIST CSF.
  • Perform compliance assessments, audits, gap analyses, and oversee remediation initiatives.
  • Support internal and external audits, certification activities, and regulatory examinations.
  • Assess security threats, vulnerabilities, and control effectiveness; communicate risks and recommendations to business and technical stakeholders.
  • Align cybersecurity, privacy, and compliance initiatives with organizational objectives and business strategy.
  • Lead governance and project management activities related to cybersecurity, privacy, and compliance programs.
  • Evaluate and recommend security and privacy controls for new and existing technologies, applications, and infrastructure.
  • Monitor emerging threats, regulatory developments, and industry best practices.
  • Support organizational compliance efforts related to GDPR, NIS2, ISO 27001/27002, and NIST CSF, including compliance reporting, governance metrics, and risk dashboards.
  • Promote the adoption of security and privacy-enhancing technologies that support effective privacy and compliance operations.

Similar roles