Senior Consultant – Cyber Security GRC

About the role

The Senior Consultant will lead Elm’s cyber security governance, risk and compliance (GRC) program. You will be responsible for assessing the organization’s risk posture, ensuring compliance with regulations, and driving continuous improvement of security processes.

Key responsibilities

• Manage day‑to‑day operations of the Corporate Cyber Security Management Department, ensuring adherence to standards and procedures.
• Identify and implement continuous‑improvement initiatives based on international best practices.
• Prepare accurate and timely governance reports for senior management.
• Develop, maintain, and regularly update security policies, standards, guidelines, and baselines.
• Lead the system‑wide information security compliance program and risk management function.
• Coordinate with Internal Audit, Corporate Compliance, and Risk Management to remediate security issues.
• Coach, mentor, and develop a small team of GRC professionals.
• Stay current on security trends and provide training to staff and external clients as needed.

Required profile

• Proven leadership and project‑management experience in cyber security or GRC.
• Strong understanding of regulatory and legal requirements affecting information security.
• Excellent analytical and communication skills, with the ability to influence stakeholders.
• Experience working with internal audit and compliance functions.

Required skills

• Information security governance and risk management.
• Development and maintenance of security policies, standards, and guidelines.
• Compliance monitoring and reporting.
• Security awareness program implementation.