- Company Name
- Apave
- Job Title
- Consultant GRC H/F
- Job Description
-
**Job Title:** GRC Consultant (Governance, Risk & Compliance)
**Role Summary:**
Provide end‑to‑end governance, risk and compliance consulting for information security. Conduct audits, risk assessments, security architecture reviews, and support clients through ISO 27001, ISO 27001 Lead Auditor/Implementer and HDS certifications, ANSSI and eIDAS compliance. Deliver project‑based solutions that ensure policy adherence, risk treatment, and regulatory alignment.
**Expectations:**
- Deliver timely, high‑quality audit and consulting deliverables.
- Ensure continuous compliance with ISO 27001, GDPR, ANSSI, HDS, and eIDAS standards.
- Act as a trusted advisor, maintaining strong client relationships and clear communication of findings and recommendations.
**Key Responsibilities:**
- Conduct internal and external security audits (ISO 27001, ISO 27005, PASSI, LPM).
- Perform risk analysis and propose comprehensive treatment plans using EBIOS RM methodology.
- Advise on policy development, governance, and security controls to meet ANSSI and Ministry of Armed Forces requirements.
- Lead clients through ISO 27001 certification, ISO 27001 Lead Auditor/Implementer, and HDS accreditation processes.
- Evaluate and validate third‑party service providers for eIDAS and PDIS compliance.
- Assess and recommend security architecture improvements aligned with industry best practices.
- Provide GDPR compliance support, including LPM PASSI audits.
- Manage project planning, budgeting, and resource allocation.
- Prepare audit reports, executive summaries, and compliance documentation.
**Required Skills:**
- Deep knowledge of ISO 27000 family standards and security frameworks.
- Proficiency in risk assessment methods, particularly EBIOS RM.
- Audit and compliance experience (ISO 27001, PASSI, HDS, eIDAS).
- Project management skills: planning, scheduling, budgeting, and resource coordination.
- Excellent written and oral communication; able to produce clear reports and conduct client workshops.
- Strong client handling and advisory capabilities.
**Required Education & Certifications:**
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.
- ISO 27001 Lead Auditor or ISO 27001 Lead Implementer certification (preferred).
- ISO 27005 certification (preferred).
---
Saint-quentin-en-yvelines, France
On site
01-12-2025