GRC & Privacy Consultant / Delivery Lead

We are the 1st Hub for Developers! Our motto is “From Developers to Developers”! Our vision is to provide real career opportunities for candidates that want to take the next step in their career. Code.Career is the first process that you will speak with developers (only!) and tech (freak) experts!

Our client is a leading Greek company specializing in information management and digital transformation. It provides solutions for document management, intelligent data processing, and secure information storage. Through advanced technologies and automation, the company helps organizations optimize workflows, ensure compliance, and improve operational efficiency across industries.

Key Responsibilities

• Own end-to-end delivery of GRC & Privacy consulting and technology implementation engagements.
• Act as the primary delivery counterpart for client stakeholders, ensuring alignment on scope, priorities and solution outcomes.
• Lead client discovery sessions, workshops and structured assessments to understand business requirements, current operating models and GRC & Privacy maturity.
• Assess client needs and design target governance models, accountability frameworks, policies, processes and remediation or implementation roadmaps.
• Translate GRC, Privacy and business requirements into functional requirements and technology solutions.
• Own solution design across areas such as risk and compliance management, controls, assessments, third-party risk, policy management and privacy operations.
• Lead and perform hands-on configuration and implementation of GRC & Privacy technology platforms, primarily OneTrust.
• Configure workflows, assessments, control and risk libraries, forms, business rules, dashboards and reporting based on client requirements.
• Coordinate integrations, data migration and other technical implementation activities where required.
• Lead testing, UAT, deployment and operational readiness through go-live and stabilization.
• Lead and support pre-sales activities including client discovery, solution presentations, platform demonstrations, scoping and effort estimation.
• Lead or contribute to RFP/ RFI responses and the preparation of solution and commercial proposals.
• Manage delivery risks, dependencies and client decisions throughout the engagement lifecycle.
• Mentor and coordinate mid-level and junior consultants and review key delivery outputs for quality and consistency.
• Contribute to GRC & Privacy methodologies, implementation accelerators, reusable assets and service offerings supporting the growth of the service line.

Required Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Systems, Engineering, Business, Law or a related field.
• 4+ years of relevant experience in GRC & Privacy or related technology consulting roles, ideally within a consulting firm, technology provider or enterprise environment.
• Strong knowledge of GRC & Privacy concepts, processes and operating models, including governance frameworks, controls, assurance and privacy operations.
• Good understanding of relevant regulatory and industry frameworks such as GDPR, ISO 27001, ISO 27701, NIST, NIS2, DORA and SOC 2.
• Experience with GRC & Privacy technology platforms such as ServiceNow IRM/GRC, RSA Archer, OneTrust or equivalent solutions, including hands-on configuration or implementation experience.
  Strong analytical and solution-design skills, with the ability to translate business and regulatory requirements into processes, workflows, policies and control structures.
• Proven consulting and client-facing skills, including workshop facilitation, stakeholder management, presentations and development of high-quality project deliverables.
• Ability to lead implementation workstreams, take ownership of delivery and drive solution outcomes.
• Strong communication, collaboration and mentoring skills, with the ability to contribute effectively within a growing, high-impact service line.
• OneTrust experience and relevant certifications in GRC, information security or privacy will be considered an advantage.

Nice-to-Have Skills

• Experience working with data privacy, information security, risk or compliance-related transformation initiatives.
• Familiarity with enterprise technology environments and digital transformation projects.
• Exposure to process optimization and the development of scalable governance or compliance solutions.
• Experience working in multi-disciplinary teams involving business, legal, technology or security stakeholders.
• Knowledge of additional GRC, Privacy or information security tools, methodologies or industry practices beyond the core requirements.

Upon further discussion with our client.