Cybersecurity GRC Consultant

About the role

Next Engineering is looking for a Cybersecurity GRC Consultant to join its Lisbon office. You will work with a variety of clients, helping them strengthen their governance, risk and compliance (GRC) programs and align security practices with industry standards.

Key responsibilities

• Engage with clients to assess and improve IT GRC frameworks, policies, and controls.
• Conduct risk assessments, compliance reviews, and gap analyses.
• Support the design and implementation of governance, risk, and compliance solutions.
• Advise clients on IT governance, cybersecurity, and compliance best practices.
• Prepare reports, recommendations, and presentations for stakeholders.
• Manage multiple client engagements while ensuring quality and timely delivery.
• Stay updated on regulatory and cybersecurity trends affecting GRC programs.

Required profile

• Bachelor’s or Master’s degree in IT, Cybersecurity, Risk Management, or a related field.
• 1–3 years of experience in IT GRC, consulting, or advisory roles.
• Strong analytical, communication, and stakeholder‑management abilities.
• Experience in audits, assessments, or compliance projects is a plus.

Required skills

• Practical knowledge of ISO/IEC 27001.
• Familiarity with NIST Cybersecurity Framework (CSF).
• Understanding of IT governance frameworks such as COBIT or ITIL.
• Knowledge of NIS2 and related certifications (e.g., ISO 27001).

What we offer

• Base salary between €1,100 and €1,400.
• Food allowance, flex benefits and additional company benefits.
• Hybrid work model in Lisbon.
• Opportunity to grow within a fast‑moving tech company.