Cyber Security GRC Consultant

About the role

We are seeking an experienced Cyber Security GRC Consultant to join our client’s team in Paris on a hybrid basis. The role starts immediately and is initially scoped for six months, with the possibility of extension.

Key responsibilities

• Design and implement a cybersecurity governance framework based on ISO 27001, NIS 2, GDPR and the AI Act.
• Conduct a comprehensive NIS 2 gap analysis for the Important Entity scope, including current‑state assessment, gap identification, prioritisation and remediation roadmap.
• Co‑author and validate security policies and procedures, managing the internal approval process.
• Engage with executive‑level audiences such as the Executive Committee and Board of Directors.
• Provide coaching and support to CISOs or security leaders during onboarding or role transitions.

Required profile

• Minimum 8 years of experience in cybersecurity, with a strong focus on GRC consulting.
• Proven operational expertise in ISO 27001, NIS 2, GDPR and the AI Act.
• Demonstrated experience conducting gap analyses and drafting security policies.
• Ability to communicate effectively with senior executives.
• Solid understanding of AI governance challenges and security integration within DevSecOps environments.

Required skills

• ISO 27001
• NIS 2
• GDPR
• AI Act
• Security policy drafting
• Gap analysis
• DevSecOps
• AI governance

What we offer

• Hybrid work model (3 days onsite in Paris).
• Competitive contract for a 6‑month engagement with extension potential.
• Opportunity to work on high‑impact security projects for a leading organization.