Senior Governance, Risk & Compliance (GRC) Consultant @Thessaloniki

What Impact will you make?

Are you looking for an opportunity in Thessaloniki that offers you a hybrid working model?

Are you ready to work on large scale projects for industry-leading clients around the world and elevate your career to an international level?

If so, check below for more info about this career opportunity!

You bring passion, we bring opportunities!

#YourOpportunity

Deloitte is a worldwide leader in Professional Services with a presence in more than 150 countries and territories. Since 2018, Deloitte has been operating its Competence Center in Thessaloniki with satellites in the cities of Patras, Heraklion, and Ioannina - which are model hubs of expertise, training, and innovation, specializing in cutting-edge exponential technologies, in which graduates and young professionals undergo immersive experiences, continuous learning, gaining practical insights and hands-on training that empower them to navigate the complexities of the digital landscape.

Deloitte is an ideal working environment for both young and senior professionals who want to take the next step in their careers, offering them a supportive and international working environment that leverages their expertise and potential. Its corporate culture is based on trust and collaboration and ensures diversity and inclusion so that everyone feels part of a great team.

We are currently seeking for ambitious team players to become part of our Governance, Risk & Compliance (GRC) team within our Technology & Transformation department in Thessaloniki.

#YourServiceLine: Technology & Transformation

Our Technology & Transformation teams empower organizations to navigate the future through technology-driven business transformation. Combining deep industry knowledge with cutting-edge technology, we deliver tailored solutions that drive innovation, enhance efficiency, promote cybersecurity, and foster sustainable growth.

#AboutYourTeam

Governance, Risk & Compliance (GRC) is a core capability within Technology & Transformation, supporting organizations in strengthening governance, enhancing resilience and effectively managing an increasingly complex risk and regulatory environment. We combine expertise across business, technology, risk and regulatory matters to help clients address emerging challenges, respond effectively to change and make informed, risk-based decisions.

Our ambition is to advance the role of GRC beyond traditional compliance and control activities towards a more integrated, strategic and technology-enabled approach to governance and risk management. We support organizations in identifying and assessing emerging risks, enhancing governance frameworks, strengthening internal controls and leveraging data and technology to improve transparency, oversight and decision-making. Through this approach, we help clients manage risk effectively while supporting sustainable growth and long-term value creation.

Our people are fundamental to our success. We foster a professional and collaborative environment that values diverse perspectives, continuous development and the exchange of knowledge and expertise. We are committed to developing high-performing talent, strengthening our capabilities and adopting innovative approaches that respond to the evolving needs of our clients and the wider market.

Our objective is to build a leading GRC practice recognized for the depth of its expertise, the quality of its delivery and the value it creates for clients. By combining strong technical capabilities with a pragmatic, forward-looking approach, we aim to support organizations in strengthening their governance, improving resilience and navigating an increasingly dynamic risk landscape with confidence.

#AboutYourRole

As a Senior Consultant within our Governance, Risk & Compliance (GRC) team, you will play a pivotal role in supporting clients in identifying, assessing, and managing risks that may impact their business objectives. You will work across diverse projects, collaborating with cross-functional teams and acting as a trusted advisor to clients. You will leverage your expertise to translate regulatory requirements, business objectives, and emerging cyber risks into effective governance frameworks, practical risk management solutions, and resilient operating models, while leading the delivery of high-quality engagements that strengthen clients’ cybersecurity and technology risk posture.

As part of your role, you will:

• Tailored to clients’ needs, risk profiles, and business objectives.
• Including vulnerability identification, control effectiveness, risk analysis, and risk quantification, providing actionable recommendations.
• IEC 62443, supporting compliance with legal and regulatory obligations.
• Including policies, standards, methodologies, controls, and governance structures.
• Strengthening detection, response, recovery, and overall cyber resilience.
• Including BIA, continuity strategies, recovery planning, crisis management, and testing.
• By evaluating critical services, processes, technology dependencies, third parties, and recovery capabilities.
• Including governance structures, policies, roles and responsibilities, risk assessments, controls, and oversight mechanisms.
• Including AI risk classification, data and model governance, security, and third-party risks.
• Translating complex cyber and technology risks into practical business solutions.
• Helping clients address emerging risks.
• Providing technical guidance, reviewing deliverables, and supporting professional development.
• To deliver integrated cybersecurity, risk, compliance, AI, and resilience solutions.
• Translating relevant developments into actionable client insights.

#OurRequirements

We are seeking experienced, driven professionals who are ready to take ownership of complex client challenges and deliver impactful cybersecurity solutions. The Senior Consultant role is ideal for professionals with proven expertise in cybersecurity strategy, risk management, compliance, and governance, combined with strong leadership and stakeholder-management skills.

Key Qualifications

• Academic background (BSc/MSc) related to Information Technology, Computer Science, Cybersecurity, or any other IT related major.

• 2+ years of relevant working experience.

• Solid professional experience in cybersecurity strategy, risk management, compliance, and governance.
• Strong knowledge of cybersecurity frameworks, risk quantification methodologies including DORA, NIS2, ISO, IEC standards, and related regulatory requirements.
• Proven ability to manage multiple stakeholders, engage effectively with executive leadership, and communicate complex cybersecurity concepts clearly to both technical and non-technical audiences.
• Demonstrated experience in leading project teams, managing client engagements, and mentoring junior colleagues.
• Strong analytical and problem-solving skills, with a proactive, results-oriented mindset.
• Excellent interpersonal, communication, and client relationship management skills.

Bonus Qualifications

• Relevant professional certifications such as CISSP, CISM, CIPP/E, ISO 27001 Lead Auditor/Implementer, CCSK, CCSP, advanced cloud certifications across AWS, Microsoft Azure, and Google Cloud.
• Familiarity with ServiceNow GRC, RSA Archer, OneTrust or PowerBI is a plus.
• Advanced expertise in IT and OT risk assessments, third-party risk management, and cybersecurity maturity assessment.
• Hands-on experience in the development, implementation, and testing of Incident Response Plans.
• Strong knowledge of cloud security principles and architecture across leading cloud platforms, including AWS, Microsoft Azure, and Google Cloud.
• Proficiency in German or French is considered a strong advantage.

#WhatWeOffer

At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits:

• Modern hybrid workplace, characterized by flexibility and Smart Working
• Empowered well-being: We provide multiple program offerings to support your well-being needs (flexible working arrangements, extra days of leave, parental allowances)
• Engagement within international large-scale teams and projects, with opportunities to travel for training or client purposes.
• Constant opportunities for learning with unlimited access to internal and external learning platforms and sponsored certificates aligned with business needs and technology trends
• Challenging and innovating environment where personal development and growth are encouraged, always with transparency and trust
• Diverse culture and active communities that enable you to bring yourself to work
• Team Building and Corporate Social Responsibility Activities
• A buddy to support you with your onboarding
• Extra days of annual leave
• Private medical health insurance plan
• Ticket restaurant card
• Exclusive Discounts to several retail providers, restaurants and others
• Mobile phone
• Fresh fruits and unlimited coffee everyday at our offices

Please note that all the well-being benefits mentioned above are subject to annual review

About Deloitte

#OurServices

Deloitte offers integrated services that include Audit, Consulting, Financial Advisory, Risk Advisory, Tax and Legal. Our approach combines insight and innovation from multiple disciplines with global business and industry expertise to help our clients excel anywhere in the world. We deliver outstanding impact on the reputation and success of our clients, in Italy and globally. In pursuing this we contribute to a sustainable and prosperous society, and are firm believers in the positive impact business can and should have on the world it operates within.

#OurPurpose

We are led by a purpose, to make an impact that matters with clients, people and society. This purpose defines who we are and what we stand for. It's not about being the biggest. It’s about being the first choice for the largest and most influential clients, and the first choice for the best talent.

#OurValues

At Deloitte we foster a collaborative culture where talented individuals can produce their best work. We value innovative thinking, diverse insights and a genuinely distinctive level of customer service through our expertise and professionalism. We value difference, with respect at the heart of our inclusive culture.

#OurTalentExperience

From day one at our firm, practitioners are part of a community. Our development and career progression framework will help them develop the skills and capabilities to succeed. The wellness of our people and the ability to offer agile working arrangements is at the center of our unique talent experience. We create a workplace that encourages collaboration, creativity, inclusiveness to ensure our staff are supported, encouraged and feel a sense of purpose and meaning in what they do each day.

Sounds like the sort of role for you? Apply now.

Location: Thessaloniki

This document has been prepared by Deloitte Business Solutions Societe Anonyme of Business Consultants, Deloitte Certified Public Accountants Societe Anonyme and Deloitte Alexander Competence Center Single Member Societe Anonyme of Business Consultants.

Deloitte Business Solutions Societe Anonyme of Business Consultants, a Greek company, registered in Greece with registered number 000665201000 and its registered office at Marousi Attica, 3a Fragkokklisias & Granikou str., 151 25, Deloitte Certified Public Accountants Societe Anonyme, a Greek company, registered in Greece with registered number 0001223601000 and its registered office at Marousi, Attica, 3a Fragkokklisias & Granikou str., 151 25 and Deloitte Alexander Competence Center Single Member Societe Anonyme of Business Consultants, a Greek company, registered in Greece with registered number 144724504000 and its registered office at Thessaloniki, PAEGA Building, Land Port Zone of the Port of Thessaloniki, 54626 Thessaloniki, Greece, are all companies of the Deloitte Central Mediterranean S.r.l. (“DCM”) geography. DCM, a company limited by guarantee registered in Italy with registered number 09599600963 and its registered office at Via Santa Sofia no.28, 20122, Milan, Italy is one of the Deloitte NSE LLP geographies. Deloitte NSE LLP is a UK limited liability partnership and member firm of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee.

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms and their related entities (collectively, the “Deloitte organization”). DTTL (also referred to as “Deloitte Global”) and each of its member firms and related entities are legally separate and independent entities, which cannot obligate or bind each other in respect of third parties. DTTL and each DTTL member firm and related entity is liable only for its own acts and omissions, and not those of any of each other. DTTL does not provide services to clients. Please see www.deloitte.com/ about to learn more.

DTTL, Deloitte NSE LLP and Deloitte Central Mediterranean S.r.l. do not provide services to clients. Please see www.deloitte.com/about to learn more about our global network of member firms.

Deloitte is a leading global provider of audit and assurance, consulting, tax and related services. Our global network of member firms and related entities in more than 150 countries and territories serves four out of five Fortune Global 500® companies. Learn how Deloitte’s approximately 470,000 people make an impact that matters at www.deloitte.com.

This communication contains general information only, and Deloitte Business Solutions Societe Anonyme of Business Consultants, Deloitte Certified Public Accountants Societe Anonyme and Deloitte Alexander Competence Center Single Member Societe Anonyme of Business Consultants, is not, by means of this communication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No entity in the Deloitte organization shall be responsible for any loss whatsoever sustained by any person who relies on this communication. Deloitte organization refers to Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms and their related entities collectively.

© 2026 For more information contact Deloitte Central Mediterranean.