Governance, Risk and Compliance Consultant

Governance,Risk and Compliance Consultant At PwC, we focus on creating a promising future where trust and innovation go side by side. Do you want to face this challenge with us? PwC Services Portugal (PSP) is a joint venture between PwC Luxembourg and PwC Portugal, serving as an integral extension of PwC Luxembourg. Our growing team operates as an acceleration centre supporting PwC Luxembourg's clients. Leveraging a unique pool of talented professionals based in Matosinhos, our operating model ensures scalability, consistency, and quality in service delivery by integrating seamlessly into PwC Luxembourg's operations and addressing talent attraction challenges sustainably. The role – Governance, Risk and Compliance Consultant As a GRC Consultant, you will help organisations to define and implement security measures to protect them against evolving cyber‐threats and ultimately support them in achieving their business objectives. Your main responsibilities will include, but are not limited to: Define and implement information security governance framework including policies, procedures, standards, baselines, roles and responsibilities Monitor and analyse security systems to identify potential threats and vulnerabilities and support the implementation of mitigation measures Assist our clients' Information Security Officers or IT Security Officers in their day‐to‐day operations Configure and maintain security tools and systems for our clients' operations Participate in assignments to conduct risk assessments on organisations' business processes, new and existing IT systems Define key risk indicators (KRIs) and key performance indicators (KPIs) to effectively monitor risks Define and implement a cybersecurity roadmap supporting our clients to identify their priorities, implementation costs, and potential for tooling Support our clients in their transformation journey following the Digital Operational Resilience Act or NIS2 requirements Your profile BSc or MSc in Information Technology, Computer Science, or a related field At least one year of professional experience in Information Security or Cybersecurity with a background in Security Compliance and IT Risk Management Previous experience or exposure to regulatory requirements such as DORA, NIS2, EBA, CSSF and GDPR Solid knowledge of risk‐management elements such as threats, vulnerabilities, risk appetite, risk tolerance and risk profile Certifications such as ISO 27001, CISA, CISSP or GSTRT would be considered an advantage Fluent in both written and spoken English and Portuguese We believe success lies in people and in your willingness to push boundaries. It's time to bring your expertise to the 'Team PwC' and drive impactful change. #J-18808-Ljbffr