GRC Consultant / Audit & Compliance (ISO 27001, NIST, CIS)

CAPVALUE CYBER SECURITY is strengthening its Governance, Risk & Compliance (GRC) practice with the recruitment of a GRC Consultant / Audit & Compliance specialist. This role is designed to complement the work of our Red Team and Security Operations Center (SOC), delivering a consolidated and holistic view of our clients' security posture — both technical and organizational. As a GRC Consultant, you will work directly with clients across various sectors (SMEs, large enterprises, regulated industries) to conduct in-depth organizational and compliance audits. You will assess the maturity of their information security programs against recognized frameworks including ISO 27001, NIST SP 800-53, CIS Controls, and PCI-DSS where applicable. Your methodology combines stakeholder interviews, thorough document reviews, and gap analyses to produce prioritized, actionable remediation roadmaps aligned with business objectives. You will also support clients in implementing or strengthening their Information Security Management Systems (ISMS), from scope definition through to certification audit readiness. You will draft or co-author security policies, operational procedures, and charters tailored to each organization, ensuring they are understood and adopted by internal teams.