ETIC, Cyber GRC Senior Associate

About the job

Line of Service

Advisory

Industry/Sector

Technology

Specialism

Advisory - Other

Management Level

Senior Associate

Job Description & Summary

Our Cyber Risk & Strategy team helps organization understand and manage the risks that come with using technology and digital services.​
​
We work with clients to answer practical questions such as: Are our most important systems sufficiently protected? Are the right controls in place? Where are the biggest risks, and what needs to improve? Are we meeting regulatory and industry expectations?​
​
As a Senior Associate, you will work at the intersection of business, technology and risk, taking ownership of key parts of client engagements. You will work directly with client teams, structure assessments, translate findings into practical recommendations and help junior colleagues deliver high-quality work.​

Core Activities: "What you'll be working on":

• Own parts of client projects: Take responsibility for defined workstreams, from planning and information gathering through analysis, documentation and finalrecommendations. ​
• Understand how clients manage technology risks: Review processes, policies and controls, speak with relevant stakeholders and identify where risks orimprovement opportunities exist. ​
• Translate requirements into practical actions: Help clients understand what regulations and industry standards mean for their organization and where changes maybe required.​
• Turn analysis into clear recommendations: Structure findings, explain their business impact and develop practical actions that clients can implement. ​
• Work directly with clients: Facilitate interviews and workshops, discuss findings and support client teams in resolving questions throughout the engagement. ​
• Support and develop junior colleagues: Review their work, provide guidance and help them build their consulting and cyber risk capabilities.​

Skills: "What you need to have"

Typically 3–6 years of relevant experience, for example in cyber or technology risk, GRC, IT audit, technology consulting, risk management or related fields. We are looking for people who can take a complex problem, structure it and turn it into a clear conclusion or recommendation. You should be comfortable taking ownership of your work, engaging directly with clients and managing several activities within a project.​

Candidates ideally have experience with assessing risks, processes or controls and turning findings into practical recommendations. You should be comfortable structuring complex topics, communicating directly with clients, producing clear management-ready deliverables. Experience guiding junior colleagues is beneficial. Strong English is required; German or Dutch skills are a plus. ​

Knowledge of areas such as ISO 27001, NIST, IT audit, regulatory compliance or third-party risk is beneficial. Relevant certifications such as CISA, CISM, CRISC or ISO27001 are an advantage, but should support rather than define the profile.​

Knowledge Exposure: "What you'll build expertise in"

As a Senior Associate, you will deepen your expertise in cyber risk and governance while building the skills required to manage increasingly complex client engagements. You will lead work packages, structure assessments, engage directly with clients and turn complex risks and requirements into practical recommendations. You will also support and guide junior colleagues and build your project delivery and stakeholder management skills, with opportunities to specialize further over time.​

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture {+ 8 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

No

Government Clearance Required?

No

Job Posting End Date

November 1, 2027