Consultant Cybersécurité GRC

About the role

We are seeking a Cybersecurity GRC Consultant to join our Center of Excellence in Tunisia. The consultant will work on governance, risk and compliance (GRC) missions for clients worldwide, helping them design, implement and improve security frameworks.

Key responsibilities

• Conduct risk analyses and develop security policies.
• Implement Information Security Management Systems (ISMS) and business continuity plans.
• Support Chief Information Security Officers (CISO) and deliver awareness training.
• Lead compliance projects for SWIFT CSP, DORA and NIS2 regulations.
• Produce deliverables such as security policies, procedures, risk registers, gap‑analysis reports and crisis‑management plans.
• Facilitate awareness sessions and present mission results to stakeholders.

Required profile

• Mobility and willingness to travel.
• University degree in cybersecurity or a related field.
• Minimum of 2 years of experience in cybersecurity GRC projects.
• Hands‑on experience with GRC missions and relevant certifications (e.g., ISO 27001 Lead Auditor/Implementer, ISO 27005 Risk Manager, ISO 22301 Lead Auditor/Implementer).
• Fluent in French and English, both written and spoken.
• Rigorous, organized, strong interpersonal skills and a proactive, quality‑focused mindset.

Required skills

• Risk analysis
• Security policy development
• ISMS implementation
• Business continuity planning
• SWIFT CSP compliance
• DORA compliance
• NIS2 compliance
• ISO 27001
• ISO 27005
• ISO 22301

What we offer

• International career opportunities within a global audit, tax and advisory firm.
• Varied projects that promote continuous learning and professional development.
• A supportive, collaborative environment that values diverse perspectives.