GRC & AI Governance Consultant

• Develop and maintain ISO/IEC 27001 policies and processes, including risk assessments, risk treatment plans and Statements of Applicability.
• Assess control design and operating effectiveness, evaluate audit evidence and verify completion of corrective actions.
• Maintain risk registers, document exceptions and residual risks, and prepare recommendations for accountable risk owners.
• Support GDPR, NIS2 and EU AI Act gap assessments, mapping applicable requirements to controls and evidence with technical, privacy and legal specialists.
• Contribute to AI governance frameworks and ISO/IEC 42001 implementation, including AI inventories, risk and impact assessments, ownership, acceptable-use policies and approval processes.
• Work with engineering teams to define AI controls covering data quality and protection, access and agent permissions, human oversight, transparency, logging and change management.
• Review AI evaluation and security-test evidence before deployment and after material changes; coordinate reassessments and track actions from control gaps and incidents.
• Assess cloud and AI providers, including security assurances, data retention, customer-data use for model training and material service changes.
• Present significant risks, control weaknesses and overdue actions to management with clear recommendations and priorities.
• Support client engagements and AI2CYBER's cybersecurity products and services.

• At least three years of experience in GRC, information security consulting, IT audit or a related discipline.
• Practical experience applying ISO/IEC 27001, including risk assessments and control reviews.
• Experience evaluating evidence, documenting findings and following corrective actions through to completion.
• Working knowledge of GDPR and familiarity with NIS2.
• Understanding of common AI and generative AI use cases, with the ability to identify relevant risks and discuss appropriate controls.
• Ability to manage your deliverables, work constructively with technical and business stakeholders, and communicate clearly in English and Greek.
• Familiarity with ISO/IEC 42001, ISO/IEC 23894, the NIST AI Risk Management Framework or the OWASP Top 10 for LLM Applications.
• Experience with SaaS products, cloud environments or organisations in regulated sectors.
• Relevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM or AIGP.

• Highly competitive salary reviewed upwards on a regular basis.
• Participation in state-of-the-art project and tech challenges and participation in large-scale projects.
• Personal and professional development, amongst industry experts and talented people.
• Continuous learning, having access to board resources.
• Equipment support so you have all the tools to do effectively and efficiently your work.
• No dress code as we want you to be as comfortable as possible.
• Competitive salary and benefits.