Location: Athens
Department: Technology & IT
Role Overview
We are looking for a GRC & Privacy Consultant to join our growing GRC & Privacy service line and contribute to consulting and technology implementation engagements.
The role combines GRC & Privacy consulting, solution design and hands-on platform implementation, covering the engagement lifecycle from client discovery and analysis through implementation and operational adoption.
The successful candidate will work across GRC & Privacy engagements, leveraging technology platforms such as OneTrust to translate regulatory and business requirements into practical, technology-enabled solutions.
Role Responsibilities
- Participate in client discovery sessions and workshops to understand business requirements, current operating models and GRC & Privacy needs.
- Perform structured assessments and analysis across GRC & Privacy processes, operating models and capabilities.
- Contribute to the design of governance models, policies, processes, controls and implementation roadmaps based on client requirements.
- Translate GRC, Privacy and business requirements into functional requirements, workflows and technology configurations.
- Contribute to solution design across areas such as risk and compliance management, controls, assessments, third-party risk, policy management and privacy operations.
- Perform hands-on configuration and implementation of GRC & Privacy technology platforms, primarily OneTrust.
- Configure workflows, assessments, control and risk libraries, forms, business rules, dashboards and reporting based on client requirements.
- Support integrations, data migration and other technical implementation activities where required.
- Execute testing and support UAT, deployment and operational readiness activities.
- Produce high-quality project deliverables including process flows, assessments, policies, procedures, control mappings and operational documentation.
- Take ownership of assigned implementation activities and deliverables, working closely with senior consultants and delivery leads.
- Contribute to pre-sales activities including solution presentations, platform demonstrations, scoping and effort estimation.
- Contribute to RFP/ RFI responses and the preparation of solution proposals.
- Contribute to GRC & Privacy methodologies, implementation accelerators, reusable assets and service offerings
Profile & Skills Required
- Bachelor’s or Master’s degree in Computer Science, Information Systems, Engineering, Business, Law or a related field.
- 3+ years of relevant experience in GRC & Privacy or related technology consulting roles, ideally within a consulting firm, technology provider or enterprise environment.
- Good knowledge of GRC & Privacy concepts, processes and operating models, including governance frameworks, controls, assurance and privacy operations.
- Good understanding of relevant regulatory and industry frameworks such as GDPR, ISO 27001, ISO 27701, NIST, NIS2, DORA and SOC 2.
- Experience with GRC & Privacy technology platforms such as ServiceNow IRM/GRC, RSA Archer, OneTrust or equivalent solutions, including exposure to hands-on configuration or implementation activities.
- Strong analytical and solution-design skills, with the ability to translate business and regulatory requirements into processes, workflows and technology configurations.
- Proven consulting and client-facing skills, including participation in workshops, presentations and stakeholder interactions.
- Ability to take ownership of assigned implementation activities and deliver high-quality outputs within agreed timelines.
- Strong communication and collaboration skills, with a structured approach and willingness to develop within a growing, high-impact service line.
- OneTrust experience and relevant certifications in GRC, information security or privacy will be considered an advantage.
The selection process follows the principles of fairness, equal treatment and non-discrimination, applying consistent, role-related evaluation criteria. Application data is processed in accordance with Archeiothiki’s Personal Data Protection Policy for Candidate Employees.