Senior Cybersecurity GRC Lead

About the role

Inetum is seeking a Senior Cybersecurity GRC Lead to drive risk, compliance and internal control initiatives across its Digital Technologies division. You will shape the internal control framework, ensure alignment with international standards, and act as the key liaison between governance, risk, compliance and technical teams.

Key responsibilities

• Lead cyber risk assessments and control reviews, identify gaps and manage remediation to closure.
• Serve as the bridge between GRC and technical teams, challenging and validating control design and implementation.
• Own and maintain the Internal Control Framework, coordinating with external auditors and internal stakeholders.
• Implement new controls to meet regulatory requirements and enhance security policies aligned with ISO 27001 and NIST.
• Collaborate with Digital Technology, Enterprise Risk Management, Legal & Compliance, and Internal Audit to embed security into business processes.

Required profile

• Strong knowledge of cybersecurity frameworks, standards and regulations such as NIS2, ISO 27001, GDPR and NIST.
• Proven experience in cybersecurity GRC, risk management, compliance, ISO implementation and audits.
• Ability to lead cross‑functional initiatives and work collaboratively.
• Excellent analytical, problem‑solving and communication skills.
• Fluency in English; professional certifications are a plus.

Required skills

• ISO 27001
• NIST
• NIS2
• GDPR

What we offer

• Hybrid work model based in Lisbon with remote flexibility.
• Opportunity to influence cybersecurity strategy in a fast‑growing global IT services firm.
• Dynamic, inclusive environment that values diversity and innovation.