Senior GRC Cybersecurity Consultant Specialized in Audit and Compliance

Project overview

Missions and Responsibilities

· Lead GRC missions and projects: scoping, planning, resources, milestones, coordination of stakeholders, risk monitoring, alerts, and arbitration.

· Prepare and conduct organizational and compliance audits: audit plans, interviews, documentary reviews, control testing, evidence collection, and qualification.

· Assess the level of compliance with ISO/IEC 27001 and 27002 standards, DNSSI, and applicable regulatory requirements, particularly Law 05-20 and, depending on the scope, Law 09-08.

· Verify existing provisions related to critical infrastructure and sensitive information systems, when they fall within the audited scope.

· Perform gap and maturity analyses, formulate factual findings, assess associated risks, and propose realistic and prioritized recommendations.

· Support ISMS initiatives: context analysis, policies and procedures, security objectives, non-conformity management, indicators, and continuous improvement.

· Contribute to cyber risk assessments and treatment plans according to ISO/IEC 27005 and, where applicable, EBIOS Risk Manager; monitor residual risks.

· Structure and monitor compliance action plans, verify implementation evidence, and prepare reports for governance bodies.

· Lead workshops and steering committees, produce minutes, management summaries, and dashboards for the IT department, CISO, and Management.

Project details

• Start: flexible
• Location: Casablanca, Morocco, MA
• Languages: French