GRC & AI Governance Consultant

AI2CYBER

4d

About The Position

AI2CYBER is seeking a GRC & AI Governance Consultant to support client engagements and the company’s products and services. The role covers information security risk assessments, policies, control reviews, audit preparation, and governance of AI systems and their use. The consultant will own assigned assessments and deliverables, work with technical and business teams, and help control owners address findings through to closure.

The consultant will work with teams building and operating the systems being assessed, allowing recommendations to be implemented and their effectiveness evaluated. The role combines product work with client engagements across different technologies and risk environments. The position is available only to Greek residents and is full-time.

Requirements

• At least three years of experience in GRC, information security consulting, IT audit, or a related discipline.
• Practical experience applying ISO/IEC 27001, including risk assessments and control reviews.
• Experience evaluating evidence, documenting findings, and following corrective actions through to completion.
• Working knowledge of GDPR and familiarity with NIS2.
• Understanding of common AI and generative AI use cases, with the ability to identify relevant risks and discuss appropriate controls.
• Ability to manage deliverables, work constructively with technical and business stakeholders, and communicate clearly in English and Greek.
• Must be a resident of Greece.

Nice To Haves

• Participation in AI governance, AI risk assessment, or AI supplier evaluation projects.
• Familiarity with ISO/IEC 42001, ISO/IEC 23894, the NIST AI Risk Management Framework, or the OWASP Top 10 for LLM Applications.
• Experience with SaaS products, cloud environments, or organisations in regulated sectors.
• Relevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM, or AIGP.

Responsibilities

• Develop and maintain ISO/IEC 27001 policies and processes, including risk assessments, risk treatment plans, and Statements of Applicability.
• Assess control design and operating effectiveness, evaluate audit evidence, and verify corrective actions are completed.
• Maintain risk registers, document exceptions and residual risks, and prepare recommendations for accountable risk owners.
• Support GDPR, NIS2, and EU AI Act gap assessments by mapping requirements to controls and evidence with technical, privacy, and legal specialists.
• Contribute to AI governance frameworks and ISO/IEC 42001 implementation, including AI inventories, risk and impact assessments, ownership, acceptable-use policies, and approval processes.
• Work with engineering teams to define AI controls for data quality and protection, access and agent permissions, human oversight, transparency, logging, and change management.
• Review AI evaluation and security-test evidence against agreed acceptance criteria before deployment and after material changes.
• Coordinate periodic reassessments and track actions arising from control gaps and incidents.
• Assess cloud and AI providers, including security assurances, data retention, use of customer data for model training, and management of material service changes.
• Present significant risks, control weaknesses, and overdue actions to management with clear recommendations and priorities.

Benefits

• Highly competitive salary reviewed upwards on a regular basis.
• Participation in state-of-the-art project and tech challenges and large-scale projects.
• Personal and professional development alongside industry experts and talented people.
• Continuous learning with access to board resources.
• Equipment support to provide tools needed to work effectively and efficiently.
• No dress code.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed