GRC & AI Governance Consultant

AI2CYBER

. Develop and maintain ISO/IEC 27001 policies and processes, including risk assessments, risk treatment plans and Statements of Applicability.

Posted 10/21/2026full-timeRemote • GreeceMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in ISO/IEC 27001 policy development, risk assessments, and control evaluations, while effectively communicating with stakeholders in both English and Greek. Proficient in managing deliverables and supporting compliance with GDPR, NIS2, and AI governance frameworks.

Highest-signal resume keywords

ISO/IEC 27001 ImplementationRisk Assessment and ManagementGDPR ComplianceAI Governance FrameworksInformation Security Consulting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentsControl ReviewsAudit Evidence EvaluationDocumentation of FindingsAI Risk IdentificationData Protection ControlsCloud Security AssessmentsSaaS ProductsISO/IEC 42001 FamiliarityNIST AI Risk Management Framework

Soft Skills

Clear CommunicationStakeholder CollaborationDeliverable Management

Certifications & Qualifications

ISO 27001 Lead ImplementerISO 27001 Lead AuditorCISACRISCCISMAIGP

Industry Keywords

GRCInformation SecurityIT AuditRegulated SectorsAI and Generative AI Use CasesNIS2OWASP Top 10 for LLM Applications

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Develop and maintain ISO/IEC 27001 policies and processes, including risk assessments, risk treatment plans and Statements of Applicability.
Assess control design and operating effectiveness, evaluate audit evidence and verify completion of corrective actions.
Maintain risk registers, document exceptions and residual risks, and prepare recommendations for accountable risk owners.
Support GDPR, NIS2 and EU AI Act gap assessments, mapping applicable requirements to controls and evidence with technical, privacy and legal specialists.
Contribute to AI governance frameworks and ISO/IEC 42001 implementation, including AI inventories, risk and impact assessments, ownership, acceptable-use policies and approval processes.
Work with engineering teams to define AI controls covering data quality and protection, access and agent permissions, human oversight, transparency, logging and change management.
Review AI evaluation and security-test evidence before deployment and after material changes; coordinate reassessments and track actions from control gaps and incidents.
Assess cloud and AI providers, including security assurances, data retention, customer-data use for model training and material service changes.
Present significant risks, control weaknesses and overdue actions to management with clear recommendations and priorities.
Support client engagements and AI2CYBER's cybersecurity products and services.

Requirements

What you’ll need

At least three years of experience in GRC, information security consulting, IT audit or a related discipline.
Practical experience applying ISO/IEC 27001, including risk assessments and control reviews.
Experience evaluating evidence, documenting findings and following corrective actions through to completion.
Working knowledge of GDPR and familiarity with NIS2.
Understanding of common AI and generative AI use cases, with the ability to identify relevant risks and discuss appropriate controls.
Ability to manage your deliverables, work constructively with technical and business stakeholders, and communicate clearly in English and Greek.
Familiarity with ISO/IEC 42001, ISO/IEC 23894, the NIST AI Risk Management Framework or the OWASP Top 10 for LLM Applications.
Experience with SaaS products, cloud environments or organisations in regulated sectors.
Relevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM or AIGP.

Benefits

Comp & perks

Highly competitive salary reviewed upwards on a regular basis.
Participation in state-of-the-art project and tech challenges and participation in large-scale projects.
Personal and professional development, amongst industry experts and talented people.
Continuous learning, having access to board resources.
Equipment support so you have all the tools to do effectively and efficiently your work.
No dress code as we want you to be as comfortable as possible.
Competitive salary and benefits.