Cyber Risk & GRC Specialist

Quick Facts

• Role: Cyber Risk & GRC Specialist

• Focus: Cyber risk assessment and GRC methodology development in R&D cybersecurity projects

Description

You will create cybersecurity risk assessment solutions from the early stage—problem discovery, standards/literature analysis, prototyping, testing, validation, and documentation. Projects will produce deliverables such as risk models, security requirements, system architectures, AI modules, test scenarios, and R&D/implementation materials. You will also work with technical teams to translate the methodologies into digital tools and decision-scoring rules.

Responsibilities

• Develop cyber risk assessment methodologies for organizations and their technology environment

• Analyze regulations, market practices, and standards

• Prepare evaluation criteria, questionnaires, evidence requirements, and recommendations

• Build risk scoring models and decision rules

• Validate methodologies using test and pilot examples

• Create management reports, R&D documentation, and implementation materials

• Collaborate with technical teams to port methodologies into digital tools

Requirements

• Master’s degree

• Minimum 3 years of professional experience

• Experience in GRC, risk management, compliance, auditing, and organizational cybersecurity

• Knowledge of standards and regulations such as NIS2, ISO 27001, ISO 27005, and NIST CSF

• Ability to design questionnaires, requirements catalogues, and assessment models

• Ability to integrate legal, technical, and organizational perspectives

• Excellent report-writing and requirements-writing skills