GRC Expert – Governance, Risk and Compliance

🔥 0 minutes ago

🌐 Greece, France – Remote

infoinfo

⏰ Full Time

🟠 Senior

🔴 Lead

🚔 Compliance

🗣️🇫🇷 French Required

Where this job comes from

Posted on ALTEN's careers page, not through a job board

First seen by Remote Rocketship 0 minutes ago

Logo of ALTEN

ALTEN

10,000+ employees

🚘 Automotive

🏗️ Construction

💼 Consulting

Automotive • Construction • Consulting

ALTEN is a leader in outsourced Engineering and R&D and IT Services, catering to various industries such as aeronautics, automotive, banking, and life sciences. With a workforce of over 57,400 employees across nearly 30 countries, ALTEN specializes in executing complex and technical projects, supporting innovation and technology advancements in multiple sectors. The company focuses on providing engineering services, project management, and IT solutions to enhance client operations and foster sustainable innovation.

📋 Description

• Support clients in achieving compliance with NIS2, DORA, ISO 27001, GDPR and industry-specific frameworks • Conduct audits and maturity assessments, document gaps and develop remediation plans • Draft and maintain documentation, including information security policies, procedures and charters • Prepare for and support certifications and external audits • Conduct risk analyses using EBIOS Risk Manager and ISO 27005 • Develop and facilitate risk maps, treatment plans and monitoring indicators • Support security governance through committees, dashboards and reporting to senior management • Translate regulatory requirements into architectural requirements in collaboration with cloud and infrastructure architects • Contribute to the design of landing zones and reference architectures with compliance built in • Participate in business continuity plans and crisis management exercises • Draft technical responses to requests for proposals and present and defend proposals • Assess and qualify clients’ compliance and governance needs • Develop and enhance GRC offerings and create accelerators • Contribute to the structuring of the Cybersecurity practice and lead the cyber community • Lead regulatory monitoring for the practice

🎯 Requirements

• Master’s degree, engineering degree or equivalent • At least 8 years of experience in cybersecurity, including 3 years focused on GRC • Strong knowledge of the following frameworks and standards: ISO 27001/27002/27005, NIS2, DORA, GDPR and ANSSI guidelines • Proficiency in the EBIOS Risk Manager methodology and knowledge of ISO 27005 • Experience conducting audits and maturity assessments • Strong understanding of cloud, infrastructure, network and IAM architectures • Knowledge of cloud security challenges and the CIS Benchmarks and CSA CCM frameworks is a plus • Professional working proficiency in English • ISO 27001 Lead Auditor or Lead Implementer certification is a plus • EBIOS Risk Manager, CISM, CISSP or CRISC certifications are valued • Ability to communicate persuasively with executive management and Executive Committees • Excellent writing skills • Pragmatism, initiative, diplomacy and strong negotiation skills

🏖️ Benefits

• Dedicated training and certification budget • Strategic positioning with direct exposure to decision-makers • A collaborative team where GRC and technical experts work together rather than in silos • A growing market in which we are actively investing • Career development path toward becoming a Cybersecurity practice subject-matter expert • Remote work opportunities

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 6 days ago

Netcompany

5001 - 10000

💼 Consulting

📦 Logistics

GRC Specialist strengthening security governance, risk, and compliance at global IT company Netcompany. Measuring controls, translating regulations, and driving security improvement projects.

🗣️🇩🇰 Danish Required

🕒 October 22

Netcompany

5001 - 10000

💼 Consulting

📦 Logistics

GRC Specialist shaping Netcompany’s information security risk, control measurement, and compliance practices. Driving security awareness and improvement projects across the international IT company.

🗣️🇩🇰 Danish Required

🕒 October 21

Netcompany

5001 - 10000

💼 Consulting

📦 Logistics

GRC Specialist measuring security controls, managing risks, and translating regulations into practical compliance solutions at Netcompany. Driving security awareness and improvement projects across an international IT company.

🗣️🇩🇰 Danish Required

🕒 October 13

ERGOMED

1001 - 5000

💼 Consulting

🏥 Healthcare

📦 Logistics

Local pharmacovigilance and regulatory affairs specialist supporting patient safety compliance for PrimeVigilance. Managing Greek-market PV, regulatory submissions, safety reporting, and authority communications.

🕒 August 5

Devoteam

5001 - 10000

💼 Consulting

🏥 Healthcare

📣 Marketing

Senior GRC Consultant managing cybersecurity governance, risk, compliance, and audits for Devoteam, a European digital strategy and technology consultancy. Onsite in Getafe, Spain.

🗣️🇪🇸 Spanish Required

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok