- Company Name
- Neosoft
- Job Title
- Consultant GRC (F/H)
- Job Description
-
**Job Title**
Consultant GRC Senior (F/H)
**Role Summary**
Provides strategic and operational governance, risk and compliance (GRC) expertise within a cybersecurity practice, focusing on conducting internal and external audits, monitoring regulatory and ISO standards adherence, strengthening internal controls, and delivering actionable reports to senior management.
**Expectations**
- Lead and execute regular internal audit plans assessing financial, operational, and logistical processes.
- Prepare for and support external audits (statutory auditors, regulatory bodies).
- Identify gaps, issue corrective recommendations, and track implementation progress.
- Ensure ongoing compliance with legal, fiscal, social, and regulatory requirements.
- Continuously update internal procedures to align with evolving ISO and local standards.
- Provide risk assessment and compliance oversight for IT and OT requests.
- Communicate audit findings clearly to decision‑makers and promote a culture of compliance.
**Key Responsibilities**
- Design, schedule, and carry out internal audit cycles for key business processes.
- Coordinate external audit engagements, providing necessary documentation and evidence.
- Conduct risk assessments, map control effectiveness, and document control frameworks.
- Develop and maintain compliance metrics and dashboards.
- Draft detailed audit and compliance reports, highlight findings, and recommend improvements.
- Train and mentor operational teams on best practices in compliance and inventory management.
- Monitor regulatory developments, assess potential impacts, and update policy controls accordingly.
- Ensure traceability and transparency of audited operations through robust documentation practices.
**Required Skills**
- Proven expertise in risk management, audit methodologies, and regulatory compliance.
- Deep knowledge of ISO standards (e.g., ISO 27001, ISO 9001, ISO 20000) and their application.
- Strong analytical and problem‑solving abilities.
- Excellent written and verbal communication in English; French proficiency desirable.
- Detail‑oriented document management and meticulous record‑keeping.
- Ability to influence stakeholders and present complex findings in clear, actionable terms.
- Self‑motivated, autonomous, and capable of prioritizing multiple projects.
**Required Education & Certifications**
- Bachelor’s or Master’s degree in Business, Finance, Information Systems, Cybersecurity, or related field.
- Professional GRC or audit certifications such as ISO 27001 Lead Auditor, ISO 9001 Lead Auditor, CISA, CISM, or equivalent.