About the Hiring Process

When you apply our AI-powered matching platform considers you not only for this opportunity but also for other relevant roles across our network one application can unlock multiple career opportunities.

We only work with real companies hiring for live positions. Every opportunity on our platform is an active search. If theres a strong match well guide you through the process; if not we wont ignore you.

About the Opportunity

Our client is seeking an experienced Cybersecurity GRC Consultant to support a major European public-sector cybersecurity programme based in Warsaw.

Youll play a key role in strengthening governance risk management compliance and cyber resilience across a highly regulated environment working with cybersecurity leaders privacy specialists and public-sector stakeholders.

This is an exciting opportunity for an experienced GRC professional who enjoys designing frameworks improving cyber maturity and influencing cybersecurity strategy at an enterprise level.

• Location: Warsaw Poland (On-site)
• Employment Type: Full-time Contract
• Contract Duration: Initial 12-month contract renewable annually for up to 48 months
• Level: Senior / Principal
• Work Model: Approximately 30% on-site / 70% remote from Warsaw

What Youll Do

Governance Risk & Compliance

• Design implement and improve cybersecurity governance and risk management frameworks
• Maintain and continuously improve enterprise cyber risk registers
• Identify assess and mitigate cybersecurity risks
• Support cybersecurity maturity improvement initiatives
• Develop cybersecurity policies standards and procedures

Privacy & Compliance

• Ensure compliance with cybersecurity privacy and data protection regulations
• Conduct Privacy Impact Assessments (PIAs)
• Identify and document compliance gaps
• Support audits compliance testing and remediation activities
• Deliver awareness and training programmes across the organisation

Risk Management

• Manage cyber risks across: Vulnerability Management Incident Management Cloud Risk Third-Party Risk Enterprise Risk

ServiceNow GRC

• Configure and manage ServiceNow GRC / IRM modules
• Support Risk Policy & Compliance processes
• Improve governance workflows and reporting

Stakeholder Management

• Advise technical and non-technical stakeholders on cybersecurity and privacy requirements
• Collaborate with internal teams auditors regulators and external partners
• Serve as a trusted advisor on governance risk and compliance matters

What Were Looking For

Mandatory Requirements

• Masters degree (Level 7) or equivalent
• English proficiency at C1 level or higher
• 9 years of ICT experience
• 8 years in Cybersecurity Governance Risk & Compliance
• 5 years focused on cybersecurity risk management
• Proven experience designing or implementing cybersecurity risk management frameworks
• Hands-on experience with ServiceNow GRC (IRM Risk Policy & Compliance)
• Experience managing enterprise cybersecurity risk registers
• Experience integrating cyber risk with vulnerability incident cloud and third-party risk management
• Strong understanding of cybersecurity governance frameworks regulations standards and privacy requirements
• Ability to develop cybersecurity and privacy policies
• Excellent stakeholder communication skills

Certifications (Mandatory)

Candidates must hold at least four of the following certifications (or recognised equivalents): CISSP CISM CISA CRISC CGRC CSSLP CCSP CISSP-ISSMP GSNA GCCC GIAC ISO-27000 Specialist ISO 27001 Lead Auditor ISO 27001 Lead Implementer ISO 27005 Risk Manager

Additional Requirement

• Eligible to obtain RESTREINT UE / EU RESTRICTED Security Clearance

What We Offer

• Long-term contract (up to 4 years)
• High-impact cybersecurity programme within a European public-sector environment
• Opportunity to shape enterprise cyber governance and risk strategy
• Work alongside experienced cybersecurity professionals
• Stable long-term engagement with meaningful responsibility
• Structured and collaborative working environment

If youre ready to help shape the future of cybersecurity governance in one of Europes most important public-sector environments wed love to hear from you...