GRC Consultant

Matproof

. Advise clients on governance, risk, and compliance requirements across DORA, ISO 27001, SOC 2, NIS2, and GDPR .

Posted 9/18/2026full-timeBerlin • GermanyMid-LevelSenior💰 €85,000 - €105,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Governance, Risk, and Compliance (GRC) consulting, with a strong focus on EU compliance frameworks such as DORA, ISO 27001, NIS2, and GDPR. Capable of conducting risk assessments and gap analyses while effectively communicating complex regulatory requirements to clients.

Highest-signal resume keywords

GRC ConsultingEU Compliance FrameworksRisk AssessmentsExcellent Communication SkillsRelevant Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

GovernanceRisk ManagementComplianceGap AnalysisMaturity AssessmentRegulatory RequirementsInternal AuditsEvidence Collection WorkflowsClient Advisory

Soft Skills

Client-Focused MindsetOrganizational SkillsProactive Approach

Tools & Technologies

GRC Automation Tools

Certifications & Qualifications

CISACISMISO 27001 Lead AuditorCRISC

Industry Keywords

DORAISO 27001NIS2GDPRSOC 2BaFinMaRisk

About the role

Key responsibilities & impact

Advise clients on governance, risk, and compliance requirements across DORA, ISO 27001, SOC 2, NIS2, and GDPR
Conduct gap analyses and maturity assessments for clients onboarding to the Matproof platform
Guide clients through implementation of compliance controls and evidence collection workflows
Support clients in preparing for external audits and regulatory inspections, including BaFin
Collaborate with the product team to translate client compliance needs into platform improvements
Develop and maintain GRC documentation, policies, and procedures on behalf of clients
Monitor regulatory developments across DORA, NIS2, GDPR, and related EU frameworks and communicate updates to clients
Deliver training and workshops on GRC best practices to client teams

Requirements

What you’ll need

3+ years of experience in GRC consulting, information security, or compliance roles
Hands-on knowledge of EU compliance frameworks: DORA, ISO 27001, NIS2, GDPR — SOC 2 experience is a strong plus
Familiarity with regulatory requirements in the financial services sector (BaFin, MaRisk) is highly desirable
Experience conducting risk assessments, internal audits, and gap analyses
Excellent communication skills in both English and German (written and spoken)
Strong ability to translate complex regulatory requirements into practical, actionable guidance
Experience working with GRC or compliance automation tools is an advantage
Relevant certifications (e.g., CISA, CISM, ISO 27001 Lead Auditor, CRISC) are a plus
A proactive, client-focused mindset with strong organizational skills

Benefits

Comp & perks

A meaningful role at the intersection of cutting-edge compliance technology and real-world regulatory impact
Flexible working arrangements with a hybrid setup from our Hamburg HQ
Competitive salary and benefits package
A collaborative, international team with flat hierarchies
Continuous learning budget for certifications, conferences, and professional development
Direct influence on product development through close collaboration with the engineering and product teams
Full access to Matproof for personal compliance projects