Cybersecurity Governance, Risk & Compliance (GRC) Manager - Athens, Hybrid (4-1)

Our client is a multinational Group of companies with an IT shared services center in Athens, with operations across multiple regions. The organization serves a diverse customer base and maintains a complex technology environment spanning corporate IT, engineering and manufacturing operations. 

This is a highly visible leadership role that will partner with cybersecurity, IT, legal, audit, procurement, and business stakeholders to ensure cyber risks are effectively identified, managed, and communicated across the enterprise.

The Role

In this role you’ll lead and continuously enhance the organization’s cybersecurity governance, risk, and compliance programs by developing and maintaining cybersecurity policies, standards, and procedures. You’ll facilitate enterprise-wide cybersecurity and technology risk assessments, manage risk registers and remediation activities, and support compliance initiatives aligned with recognized security frameworks and regulations, including CMMC/NIST 800-171, GDPR, TISAX, NIS2, and PCI DSS. 

Additionally, you will own coordination of internal and external audits, oversee third-party cybersecurity risk management processes, and drive cybersecurity awareness and training programs across the organization. You’ll manage distributed teams, working in close partnership with and reporting directly to the company's CISO.

What You’ll Bring

• 7+ years of experience in cybersecurity, information security, IT risk, compliance, or GRC-related functions
• 2+ years in a leadership or program ownership role, having previously led cybersecurity risk management and compliance initiatives
•  Strong understanding of cybersecurity frameworks and regulatory requirements (CMMC/NIST 800-171, GDPR, TISAX, NIS2, and PCI DSS)
• Experience supporting audits, assessments, and control maturity programs
• Ability to communicate technical and cyber risk concepts to executive and non-technical audiences
• Strong stakeholder management, cross-functional collaboration, and project/program management experience

Nice to Have

• Professional certifications such as CISSP, CISM, CRISC, CISA, or similar
• Experience within global, regulated, or industrial environments
• Familiarity with operational technology (OT), manufacturing, or complex enterprise environments
• Experience supporting multi-jurisdictional compliance programs

What’s in it for You

This is a strategic and highly visible cybersecurity leadership role with opportunity to shape and mature enterprise-wide GRC capabilities. You will have exposure to executive leadership and cross-functional business stakeholders across a complex global environment.

€5,000 – €5,500 Gross / Month salary commensurate with experience, with yearly performance bonus, full family private insurance and pension plan as some of the benefits. 

The role is hybrid, 4 days in office, 1 day remote in Athens based offices.

For confidentiality reasons, additional company information will be shared during the interview process.