Consultant – GRC (Governance, Risk & Compliance)

About the role

HCLTech is looking for an experienced Consultant – GRC to support a leading German financial services client. You will lead governance, risk, compliance and information security initiatives, ensuring alignment with regulatory standards and industry best practices.

Key responsibilities

• Lead and execute GRC, risk management, compliance and information security projects.
• Define, implement and maintain policies, controls and certification processes (ISO 27001 and other regulations).
• Conduct risk assessments, gap analyses, privacy impact assessments and oversee remediation.
• Plan and support internal, external and third‑party audits (ISO 27001, MaRisk, ISAE 3000/3402, KRITIS, SWIFT, DORA, ISO 9001).
• Perform internal control testing, security reviews and provide improvement recommendations.
• Deliver compliance reporting, stakeholder presentations and security awareness training.

Required profile

• 10+ years of experience in GRC, information security, IT audit or risk management.
• Mandatory certifications: ISO 27001 Lead Auditor and CISA.
• Fluent in German (C1) and English (C1).
• Experience in banking or financial services is highly preferred.

Required skills

• ISO 27001 implementation and auditing
• SOX ITGC controls
• GDPR and DORA compliance
• Privacy controls and security breach management
• Risk assessment and remediation programs
• Audit management and internal control testing
• Infrastructure, networks, data centre and server management