GRC Expert

The organization

Why Join Us? It's More Than a Job in Retail, It's Your Story.

At Public Group, we believe in the power of our people in a sustainable way. That's why we're not just focused on what you do, but who you become. We're committed to fueling your growth, because when you win, we all win. Imagine a place where you feel supported, valued, and empowered to make a real difference. A place where you can build a career you love, to leave your mark in our story!

Public Group strategically invests to create an ecosystem of innovative scaleups around its Omnichannel Retail business, with the objective to provide exciting customer experiences and foster Entrepreneurship in Greece. We bring together technology, talent & entrepreneurship to create value in the Greek market. Our role is to help our subsidiaries or investee companies grow and their founders to succeed through capital and creative synergies. Our investment portfolio includes Public-MediaMarkt, iRepair, Douleutaras.gr, PublicNEXT, Venture Friends.

PublicNEXT leads the digital transformation of retail, with solutions to reimagine processes, integrate technologies and introduce innovative services or platforms that transform employee and customer experience. We develop and unleash the best technology solutions that shape the future of retail. Our team of software developers, engineers, digital and IT experts combine strong technical skills and entrepreneurial thinking to help organizations stay ahead.

As future-ready innovators, we engage in multiple projects and create growth opportunities for everyone to find what they are looking for. Together we can reimagine retail and unleash the best technology platforms to create new capabilities for people and inspire them to enjoy life. We grow by continuously developing on each other’s ideas.

Let’s grow together.

#LI-Hybrid

At Publicnext, we are strengthening our cybersecurity governance, risk, and compliance (GRC) function and looking for a GRC Expert to join the team. Working closely with and reporting directly to the CISO, you will help us mature our risk management and resilience across cybersecurity, privacy, business continuity, AI compliance, and third-party risk.

This is a hands-on delivery role with real ownership. You will run assessments, maintain our risk and compliance posture against recognized frameworks, and support the growing intersection of GRC and IT contract management, reviewing business terms, shaping governance and SLAs, and ensuring our internal and third-party arrangements meet our standards.

Responsibilities:

• Develop and maintain cybersecurity policies, standards, and procedures aligned to recognized frameworks and regulations (NIST CSF, GDPR, NIS2, PCI DSS, EU AI Act).

• Facilitate cybersecurity and technology risk assessments; maintain risk registers and track remediation activities to closure.
• Participate in risk assessments, vulnerability assessments, and gap analyses, and translate findings into practical improvement plans.
• Support compliance initiatives including DPIAs, TPRAs (Third-Party Risk Assessments), and EU AI Act readiness.
• Coordinate and support internal and external audits and Cyber Insurance audits.
• Oversee third-party cybersecurity risk management processes, ensuring internal teams and vendors adhere to our standards.
• Review contracts' business terms and highlight areas for improvement.
• Contribute to the design of governance and SLAs for contract management.
• Support the legal and partner interface on contracts, NDAs, and Technical & Organizational Measures (TOMs).
• Take ownership of delivery within your assigned workstreams and deliverables, ensuring quality and timely execution.
• Participate in the project management of ongoing GRC engagements.
• Provide time and effort estimates for prospective engagements and contribute to the technical writing of proposals and offers.
• Facilitate training sessions and workshops to drive cybersecurity awareness across the organization.
• Communicate clearly with technical specialists, business leaders, and legal/compliance stakeholders.

Requirements:

• 2-4 years of experience in cybersecurity, information security, compliance, or GRC-related functions.
• Solid understanding of cybersecurity frameworks and regulatory requirements (NIST CSF, GDPR, NIS2, PCI DSS, EU AI Act).
• Experience supporting audits, assessments, and control-maturity activities.
• Familiarity with IT project management principles and related methodologies.
• Experience with or exposure to IT contract management (reviewing terms, SLAs, governance).
• Strong analytical and problem-solving abilities.
• Ability to communicate technical and cyber-risk concepts to both technical and non-technical audiences, including executives.
• Strong stakeholder management and cross-functional collaboration skills.
• A team player who supports and helps drive common goals.
• Languages: Greek and English (both required, written and spoken).
• Professional certifications such as ISO 27001 Lead Auditor (ISO27001-LA), CISM, CISA, or similar.
• Experience working within regulated environments.
• Prior exposure to Contract Management roles or IT business-facing roles.

What we offer:

• 💼 Competitive compensation & benefits package
• 💰 Performance-based bonus scheme
• 🧑‍⚕️ Comprehensive life & health insurance
• 🏡 Flexible hybrid working model – to support your work-life balance
• 🧡 Psychological support via a professional helpline for you and your family
• 🚀 Career growth opportunities in a role that evolves with you
• 🎉 Valuable experience in a well-known and fast-growing organization
• 📚 Continuous learning and upskilling through tailored programs
• 🏃🏽‍♂️ Employee Wellness Program – office Pilates & sports teams (padel, football, volleyball & more)
• 🚗 Alternative transportation with company shuttle buses to our offices
• 📲 Exclusive access to our employee app, OrangeGen, packed with tools, news & perks
  

What Does OrangeGen Offer?

🔗 Connect: Engage with your colleagues and management seamlessly, ensuring you're always in the loop and part of our dynamic community.

🎉 Recognize: Celebrate achievements and milestones with a culture of recognition that boosts morale and fosters a positive work environment.

🏆 Custom Rewards: Enjoy personalized rewards and kudos, tailored to recognize your unique contributions and achievements.

Are you ready to be the next #OrangeGen maker?

Orange Gen, is our team of 2.200 people who are committed to cultivating an innovative retailtainment environment, supporting continuous development, and embracing flexibility—all while placing customer centricity at the forefront. We believe in fostering a culture that values your contributions, boosts your ambitions, and supports personal and professional growth. "Joy at Public" is our main motto which lies in creating a workplace where every individual is empowered to excel and evolve, always keeping the customer at the heart of our endeavors. We like to share our moments under the #OrangeTeam celebrating all team's achievements and Orange Marks Stories!

All applications will be treated with the strictest confidentiality.