Location: Athens
Department: Technology & IT
Role Overview
We are looking for a Senior GRC & Privacy Consultant / Delivery Lead to play a key role in the growth and delivery of our GRC & Privacy service line.
The role combines GRC & Privacy consulting, solution design, hands-on platform implementation and delivery leadership, covering the full engagement lifecycle from client discovery and pre-sales through implementation and operational adoption.
The successful candidate will work across GRC & Privacy engagements, leveraging technology platforms such as OneTrust to translate regulatory and business requirements into practical, technology-enabled solutions.
Role Responsibilities
- Own end-to-end delivery of GRC & Privacy consulting and technology implementation engagements.
- Act as the primary delivery counterpart for client stakeholders, ensuring alignment on scope, priorities and solution outcomes.
- Lead client discovery sessions, workshops and structured assessments to understand business requirements, current operating models and GRC & Privacy maturity.
- Assess client needs and design target governance models, accountability frameworks, policies, processes and remediation or implementation roadmaps.
- Translate GRC, Privacy and business requirements into functional requirements and technology solutions.
- Own solution design across areas such as risk and compliance management, controls, assessments, third-party risk, policy management and privacy operations.
- Lead and perform hands-on configuration and implementation of GRC & Privacy technology platforms, primarily OneTrust.
- Configure workflows, assessments, control and risk libraries, forms, business rules, dashboards and reporting based on client requirements.
- Coordinate integrations, data migration and other technical implementation activities where required.
- Lead testing, UAT, deployment and operational readiness through go-live and stabilization.
- Lead and support pre-sales activities including client discovery, solution presentations, platform demonstrations, scoping and effort estimation.
- Lead or contribute to RFP/ RFI responses and the preparation of solution and commercial proposals.
- Manage delivery risks, dependencies and client decisions throughout the engagement lifecycle.
- Mentor and coordinate mid-level and junior consultants and review key delivery outputs for quality and consistency.
- Contribute to GRC & Privacy methodologies, implementation accelerators, reusable assets and service offerings supporting the growth of the service line
Profile & Skills Required
- Lead strategic projects shaping
- Bachelor’s or Master’s degree in Computer Science, Information Systems, Engineering, Business, Law or a related field.
- 4+ years of relevant experience in GRC & Privacy or related technology consulting roles, ideally within a consulting firm, technology provider or enterprise environment.
- Strong knowledge of GRC & Privacy concepts, processes and operating models, including governance frameworks, controls, assurance and privacy operations.
- Good understanding of relevant regulatory and industry frameworks such as GDPR, ISO 27001, ISO 27701, NIST, NIS2, DORA and SOC 2.
- Experience with GRC & Privacy technology platforms such as ServiceNow IRM/GRC, RSA Archer, OneTrust or equivalent solutions, including hands-on configuration or implementation experience.
- Strong analytical and solution-design skills, with the ability to translate business and regulatory requirements into processes, workflows, policies and control structures.
- Proven consulting and client-facing skills, including workshop facilitation, stakeholder management, presentations and development of high-quality project deliverables.
- Ability to lead implementation workstreams, take ownership of delivery and drive solution outcomes.
- Strong communication, collaboration and mentoring skills, with the ability to contribute effectively within a growing, high-impact service line.
- OneTrust experience and relevant certifications in GRC, information security or privacy will be considered an advantage.
The selection process follows the principles of fairness, equal treatment and non-discrimination, applying consistent, role-related evaluation criteria. Application data is processed in accordance with Archeiothiki’s Personal Data Protection Policy for Candidate Employees.