Senior GRC

h3Ready to shape the future of Governance, Risk Compliance? /h3 pYou are passionate about information security, risk management and compliance. You enjoy bringing structure to complex environments, translating regulatory requirements into practical solutions and helping organisations become more secure and resilient. /p pWhether you already have experience in Governance, Risk Compliance or have developed expertise in information security, audit or risk management, you are looking for more. /p pMore ownership. More impact. More opportunities to work on meaningful cybersecurity and compliance challenges. /p pAnd above all, you are looking for an environment where expertise, collaboration and continuous learning go hand in hand. /p h3Welcome to RSM. /h3 pCybersecurity Privacy at RSM: making security business relevant /p pAt RSM, we believe cybersecurity and compliance are not just about frameworks, controls and regulations. They are about enabling organisations to grow with confidence. /p pOur Cybersecurity Privacy team helps both RSM and our clients navigate an increasingly complex landscape of information security, privacy, governance and regulatory requirements. We work closely with stakeholders to translate obligations into practical and sustainable solutions that create real business value. /p pAs a GRC ISMS Consultant, you will play a key role in strengthening our internal governance and compliance framework while supporting clients in their cybersecurity and compliance journeys. /p pYou will contribute to the continuous improvement of our Information Security Management System (ISMS), coordinate compliance activities, support risk management initiatives and help organisations prepare for audits, certifications and regulatory requirements such as ISO 27001, GDPR, NIS2 and Cyber Fundamentals. /p pAt the same time, you will have the opportunity to grow your consulting expertise by participating in client engagements across various industries and organisations. /p pOne day you may be coordinating an ISO 27001 audit, reviewing security controls or supporting compliance reporting. The next day, you could be performing a risk assessment, advising a client on NIS2 readiness or helping define pragmatic governance processes that drive long-term improvement. /p h3Why join RSM? /h3 pAt RSM, you'll find much more than a traditional compliance role. /p pWe combine technical expertise, business insight and a people-focused culture. Our teams work closely together, knowledge is shared openly and everyone is encouraged to take ownership and contribute ideas. /p h3What will you do? /h3 h3Internal GRC ISMS operations /h3 ul liCoordinate and maintain internal ISMS and compliance activities in line with ISO 27001:2022, GDPR, internal standards and other applicable requirements. /li liMaintain and improve security policies, procedures, risk registers and compliance documentation. /li liCoordinate internal, group and external audits, including evidence collection, findings and corrective actions. /li liSupport supplier security assessments, client security questionnaires and third-party risk management. /li liCoordinate recurring compliance reviews, deadlines, assigned actions and contributions from control owners. /li liSupport GDPR and privacy-related activities in collaboration with the DPO. /li liContribute to security awareness, incident management follow-up and business continuity activities. /li /ul h3Process improvement and automation /h3 ul liSupport the simplification and standardisation of internal GRC processes. /li liImprove document lifecycle management, evidence traceability, approval workflows and management reporting. /li liPromote clear ownership, accountability and efficient collaboration between stakeholders. /li /ul h3Client consulting /h3 ul liSupport clients with ISO 27001, Cyber Fundamentals NIS2, GDPR and related compliance initiatives. /li liConduct risk assessments, gap analyses and compliance reviews. /li liTranslate organisational security requirements into actionable security controls. /li liSupport preparation for internal and external audits. /li liContribute to reusable consulting methodologies, templates and deliverables. /li /ul h3Who are you? /h3 ul liYou have approximately 3 to 6 years of experience in Governance, Risk Compliance (GRC), Information Security, Internal Audit or Compliance. /li liYou have practical knowledge of ISO 27001, GDPR, Cyber Fundamentals and/or NIS2. /li liYou are familiar with risk management, audit preparation and security documentation. /li liYou combine analytical thinking with a structured and solution-oriented approach. /li liYou can work independently while effectively coordinating with multiple stakeholders. /li liExperience in consultancy is a strong asset. /li liCertifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISM or CISSP are considered an advantage. /li liYou have a general understanding of IT environments, cloud techn