Senior GRC Consultant GRC

Position: Senior GRC Consultant GRC  ·
Do you want to provide strategic advice and actually see your recommendations put into practice? At mnemonic, you’ll help some of Europe’s most business-critical organisations, across the Benelux, the Nordics and the UK, to strengthen their resilience against threats and manage their risks. We translate governance, risk and security into choices that really matter for our clients. You’ll rarely spend two weeks doing the same thing: one day you might be advising a client’s C-suite on where to focus their cybersecurity efforts.

The next, you could be leading a strategic security project or stepping in as CISO-for-hire.

mnemonic’s success and growth has created the need for us to strengthen our GRC team in the Netherlands and we are looking for a Senior GRC Consultant who will work closely with clients and wants to contribute to the further development of our services.

If you ask one of our GRC colleagues why they work for mnemonic, you’ll often hear the same answers: the unique in-house expertise, a flat organisational structure and a close-knit atmosphere with scope for social activities. You can see from the figures that this approach works well: our staff turnover is below 5 per cent, exceptionally low for our industry, and our client retention rate is around 95 per cent.

About the role
mnemonic was founded in 2000 and, with 450 employees, has become one of Europe’s largest independent pure-play cybersecurity firms. You’ll be working alongside an international team of security specialists on complex and meaningful challenges. We work for some of the most critical organisations and infrastructures and are best known for our Security Operations Centers (SOC) and Managed Detection and Response (MDR) services, through which we protect clients on a daily basis against today’s most advanced cyber threats.

As a Senior GRC Consultant, you’ll play a key role in our advisory services in the field of Governance, Risk & Compliance. You’ll work closely with clients and support organisations in setting up, developing and managing their information security programmes within complex and business-critical environments.

You will work on highly complex projects, often in direct collaboration with executive boards and management teams. In doing so, you will translate risks, regulations and strategic objectives into structures, processes and concrete improvements. You will collaborate with both business and technical teams, often in environments where security is essential to the organisation’s continuity.

The role is based at our office in Utrecht, with the option to work flexibly from the office and from home. As our head office is in Oslo, you may occasionally be required to travel there.

Your responsibilities

Independently leading and carrying out consultancy projects in the field of information security and GRC, from analysis through to implementation.

Acting as a security manager or CISO-for-hire for clients, steering their security programme and embedding it within the organisation.

Translating legal and regulatory requirements and risks into governance structures, operating models and practical working methods. Examples include NIS2, CbW, BIO, DORA, the GDPR, the EU AI Act and the CRA.

Advising boards and management teams on governance, risks and maturity development.

Communicating / presenting technical findings to a management audience that want to relate the findings to their strategic and financial priorities.

Planning and carrying out risk analyses, security assessments and crisis and resilience exercises.

Establishing and further developing Information Security Management Systems (ISMS) and supporting compliance initiatives.

Collaborating with both business stakeholders and technical teams.

Managing…