Senior Cybersecurity GRC Consultant | Warsaw

About the Hiring Process

When you apply, our AI-powered matching platform considers you not only for this opportunity, but also for other relevant roles across our network, one application can unlock multiple career opportunities.

We only work with real companies hiring for live positions. Every opportunity on our platform is an active search. If there's a strong match, we'll guide you through the process; if not, we won't ignore you.

About the Opportunity

Our client is seeking an experienced Cybersecurity GRC Consultant to support a major European public-sector cybersecurity programme based in Warsaw.

You'll play a key role in strengthening governance, risk management, compliance, and cyber resilience across a highly regulated environment, working with cybersecurity leaders, privacy specialists, and public-sector stakeholders.

This is an exciting opportunity for an experienced GRC professional who enjoys designing frameworks, improving cyber maturity, and influencing cybersecurity strategy at an enterprise level.

• Location: Warsaw, Poland (On-site)
• Employment Type: Full-time Contract
• Contract Duration: Initial 12-month contract, renewable annually for up to 48 months
• Level: Senior / Principal
• Work Model: Approximately 30% on-site / 70% remote from Warsaw

What You'll Do

Governance, Risk & Compliance

• Design, implement, and improve cybersecurity governance and risk management frameworks
• Maintain and continuously improve enterprise cyber risk registers
• Identify, assess, and mitigate cybersecurity risks
• Support cybersecurity maturity improvement initiatives
• Develop cybersecurity policies, standards, and procedures

Privacy & Compliance

• Ensure compliance with cybersecurity, privacy, and data protection regulations
• Conduct Privacy Impact Assessments (PIAs)
• Identify and document compliance gaps
• Support audits, compliance testing, and remediation activities
• Deliver awareness and training programmes across the organisation

Risk Management

• Manage cyber risks across: Vulnerability Management, Incident Management, Cloud Risk, Third-Party Risk, Enterprise Risk

ServiceNow GRC

• Configure and manage ServiceNow GRC / IRM modules
• Support Risk, Policy & Compliance processes
• Improve governance workflows and reporting

Stakeholder Management

• Advise technical and non-technical stakeholders on cybersecurity and privacy requirements
• Collaborate with internal teams, auditors, regulators, and external partners
• Serve as a trusted advisor on governance, risk, and compliance matters

What We're Looking For

Mandatory Requirements

• Master's degree (Level 7) or equivalent
• English proficiency at C1 level or higher
• 9+ years of ICT experience
• 8+ years in Cybersecurity Governance, Risk & Compliance
• 5+ years focused on cybersecurity risk management
• Proven experience designing or implementing cybersecurity risk management frameworks
• Hands-on experience with ServiceNow GRC (IRM, Risk, Policy & Compliance)
• Experience managing enterprise cybersecurity risk registers
• Experience integrating cyber risk with vulnerability, incident, cloud, and third-party risk management
• Strong understanding of cybersecurity governance frameworks, regulations, standards, and privacy requirements
• Ability to develop cybersecurity and privacy policies
• Excellent stakeholder communication skills

Certifications (Mandatory)

Candidates must hold at least four of the following certifications (or recognised equivalents): CISSP, CISM, CISA, CRISC, CGRC, CSSLP, CCSP, CISSP-ISSMP, GSNA, GCCC, GIAC ISO-27000 Specialist, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, ISO 27005 Risk Manager

Additional Requirement

• Eligible to obtain RESTREINT UE / EU RESTRICTED Security Clearance

What We Offer

• Long-term contract (up to 4 years)
• High-impact cybersecurity programme within a European public-sector environment
• Opportunity to shape enterprise cyber governance and risk strategy
• Work alongside experienced cybersecurity professionals
• Stable, long-term engagement with meaningful responsibility
• Structured and collaborative working environment

If you're ready to help shape the future of cybersecurity governance in one of Europe's most important public-sector environments, we'd love to hear from you...