Senior GRC

Ready to shape the future of Governance, Risk & Compliance?

You are passionate about information security, risk management and compliance. You enjoy bringing structure to complex environments, translating regulatory requirements into practical solutions and helping organisations become more secure and resilient.

Whether you already have experience in Governance, Risk & Compliance or have developed expertise in information security, audit or risk management, you are looking for more.

More ownership. More impact. More opportunities to work on meaningful cybersecurity and compliance challenges.

And above all, you are looking for an environment where expertise, collaboration and continuous learning go hand in hand.

Welcome to RSM.

Cybersecurity & Privacy at RSM: making security business relevant

At RSM, we believe cybersecurity and compliance are not just about frameworks, controls and regulations. They are about enabling organisations to grow with confidence.

Our Cybersecurity & Privacy team helps both RSM and our clients navigate an increasingly complex landscape of information security, privacy, governance and regulatory requirements. We work closely with stakeholders to translate obligations into practical and sustainable solutions that create real business value.

As a GRC & ISMS Consultant, you will play a key role in strengthening our internal governance and compliance framework while supporting clients in their cybersecurity and compliance journeys.

You will contribute to the continuous improvement of our Information Security Management System (ISMS), coordinate compliance activities, support risk management initiatives and help organisations prepare for audits, certifications and regulatory requirements such as ISO 27001, GDPR, NIS2 and Cyber Fundamentals.

At the same time, you will have the opportunity to grow your consulting expertise by participating in client engagements across various industries and organisations.

One day you may be coordinating an ISO 27001 audit, reviewing security controls or supporting compliance reporting. The next day, you could be performing a risk assessment, advising a client on NIS2 readiness or helping define pragmatic governance processes that drive long-term improvement.

Why join RSM?

At RSM, you'll find much more than a traditional compliance role.

We combine technical expertise, business insight and a people-focused culture. Our teams work closely together, knowledge is shared openly and everyone is encouraged to take ownership and contribute ideas.

What will you do?

Internal GRC & ISMS operations

• Coordinate and maintain internal ISMS and compliance activities in line with ISO 27001:2022, GDPR, internal standards and other applicable requirements.
• Maintain and improve security policies, procedures, risk registers and compliance documentation.
• Coordinate internal, group and external audits, including evidence collection, findings and corrective actions.
• Support supplier security assessments, client security questionnaires and third-party risk management.
• Coordinate recurring compliance reviews, deadlines, assigned actions and contributions from control owners.
• Support GDPR and privacy-related activities in collaboration with the DPO.
• Contribute to security awareness, incident management follow-up and business continuity activities.

Process improvement and automation

• Support the simplification and standardisation of internal GRC processes.
• Improve document lifecycle management, evidence traceability, approval workflows and management reporting.
• Promote clear ownership, accountability and efficient collaboration between stakeholders.

Client consulting

• Support clients with ISO 27001, Cyber Fundamentals NIS2, GDPR and related compliance initiatives.
• Conduct risk assessments, gap analyses and compliance reviews.
• Translate organisational security requirements into actionable security controls.
• Support preparation for internal and external audits.
• Contribute to reusable consulting methodologies, templates and deliverables.

Who are you?

• You have approximately 3 to 6 years of experience in Governance, Risk & Compliance (GRC), Information Security, Internal Audit or Compliance.
• You have practical knowledge of ISO 27001, GDPR, Cyber Fundamentals and/or NIS2.
• You are familiar with risk management, audit preparation and security documentation.
• You combine analytical thinking with a structured and solution-oriented approach.
• You can work independently while effectively coordinating with multiple stakeholders.
• Experience in consultancy is a strong asset.
• Certifications such as ISO 27001 Lead Impl