GRC & Cybersecurity Strategy Consultant

• 📝 Stable integration into an international company in full growth.

• 💰 Salary range based on experience and seniority.

• 📊 Flexible compensation plan.

• 📚 Ongoing training and professional development plan.

• 🌍 Participation in strategic national and international projects.

• ⏰ Flexible working hours and work-life balance.

At Excelia, a multinational Consulting, Technology, and Professional Services firm with over 25 years of experience and a presence in more than 50 countries across Europe, Latin America, and the United States through our 9 own offices, we continue to grow and want to bring talent into our Cybersecurity and Risk team.

We are looking for a Senior GRC and Cybersecurity Strategy Consultant with experience in defining Cybersecurity Master Plans, maturity assessments, and security governance, who wants to participate in strategic transformation and risk management projects.

• Lead end-to-end one or more workstreams of a Cybersecurity Master Plan, being responsible for the quality and delivery of results.

• Design and execute cybersecurity maturity assessments based on reference frameworks such as NIST CSF, ISO/IEC 27001, ENS, and CIS Controls.

• Conduct interviews and working sessions with stakeholders from different areas to identify gaps and improvement opportunities.

• Define cybersecurity dashboards (KPI/KRI) aligned with business objectives and develop prioritized recommendations based on risk analysis.

• Prepare executive reports on the state of cybersecurity to facilitate strategic decision-making.

• Participate in the definition and evolution of cybersecurity governance models, including roles, responsibilities, committees, and reporting processes.

• Align cybersecurity strategy with governance and management frameworks such as COBIT, ISO 38500, and NIST AI RMF.

• Facilitate workshops and working sessions with technical and business teams.

• Coordinate and supervise the work of junior profiles, reviewing deliverables and providing mentoring.

• Manage the planning, monitoring, and evolution of activities assigned within the project.

• University degree in Computer Engineering, Telecommunications, or a similar field.

• More than 2 years of experience in cybersecurity consulting, GRC, or technology risk management.

• At least 2 years of experience in Cybersecurity Master Plan projects, maturity assessments, or security strategy definition.

• Experience working with frameworks and standards such as ISO/IEC 27001, NIST CSF, ENS, CIS Controls, COBIT, or ISO 38500.

• Ability to interact with technical and executive profiles, adapting the message according to the audience.

• English level C1 or high B2 with experience participating in international meetings.

• Certifications such as CISM, CRISC, or equivalent will be valued.

Hybrid, in Madrid (2 days of on-site presence)

If you want to be part of a team specialized in cybersecurity strategy, governance, and risk management, working on high-impact projects for large organizations, we would love to meet you!