Consultant – GRC (Governance, Risk & Compliance)

We are HCLTech, one of the fastest-growing large tech companies in the world and home to 225,000+ people across 60 countries, supercharging progress through industry-leading capabilities centered around Digital, Engineering and Cloud. The driving force behind that work, our people, are diverse, creative, and passionate, raising the bar for excellence on a regular basis. We, in turn, work hard to bring out the best in them as we strive to help them find their spark and become the best version of themselves that they can be. If all this sounds like an environment you’ll thrive in, then you’re in the right place. Join us on our journey in advancing the technological world through innovation and creativity.

We are seeking an experienced Consultant – GRC (Governance, Risk & Compliance) to support a leading German financial services client. In this role, you will drive risk management, compliance, audit, and information security initiatives while ensuring adherence to regulatory and industry standards. You will work closely with security, infrastructure, operations, and business teams to strengthen governance frameworks and maintain a robust compliance posture.

Key Responsibilities

• Lead and execute governance, risk management, compliance, and information security initiatives.
• Define, implement, and maintain policies, controls, and certification processes aligned with ISO 27001 and other regulatory requirements.
• Conduct risk assessments, gap analyses, privacy impact assessments, and oversee remediation activities.
• Plan and support internal, external, and third-party audits including ISO 27001 , MaRisk , ISAE 3000 , ISAE 3402 , KRITIS , SWIFT , DORA , and ISO 9001 .
• Perform internal control testing, security reviews, and provide recommendations to improve compliance and security effectiveness.
• Deliver compliance reporting, stakeholder presentations, and security awareness training programs.

Required Skills & Experience

• 10+ years of experience in Governance, Risk & Compliance (GRC), Information Security, IT Audit, or Risk Management.
• Strong hands-on experience with ISO 27001 , risk assessments, compliance frameworks, audit management, and remediation programs.
• Practical knowledge of SOX ITGC , GDPR , DORA , privacy controls, and security breach management.
• Experience working in complex IT environments including infrastructure, networks, data centers, server management, and IT operations.
• Mandatory certifications: ISO 27001 Lead Auditor and CISA.
• German (C1) and English (C1) language skills
• Experience in the banking or financial services sector is highly preferred.

We promote equal opportunities for all employees, regardless of their cultural and social background, gender, disability, age, religion, beliefs, and sexual identity. We give priority consideration to severely disabled applicants and those of equal status in the case of equal suitability.

HCLTech is committed to protecting and securing the privacy and confidentiality of the Personal Data which it collects directly or indirectly from you when applying for a job at HCLTech either directly or through a third-party human resources agency. This notice (the “Notice”) outlines and explains how HCL Technologies Limited including its subsidiaries, local employing entities, associates, and affiliated companies (collectively referred to as “HCLTech”, “us,” “our”, or “we”) will process your Personal Data in accordance with applicable privacy legislation(s).

Candidate Data Privacy Notice | HCLTech Germany