{"id":2165341,"url":"https://alion.io/job/thales-group-grc-senior-consultant","title":"GRC Senior Consultant","company":{"id":143,"name":"Thales Group","domain":"thalesgroup.com","url":"https://alion.io/company/thales","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":48,"ghost_share":0,"stale_share":0.354,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vitoria-Gasteiz, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":53000,"max_usd":112000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-10-09T09:46:02Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-20T20:30:39Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Location: Vitoria, SpainThales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.Join our cybersecurity team as a GRC Senior Consultant and help organizations navigate today’s evolving security and regulatory landscape.\nYou will work on cybersecurity assessments, audits, risk and compliance initiatives across leading frameworks and regulations such as ISO 27001, NIST CSF, ENS, PCI DSS, ISO 22301, GDPR, NIS2 and DORA, while advising clients and contributing to the development and continuous improvement of our GRC services.\nThis is an opportunity to combine your cybersecurity and GRC expertise with consulting, project coordination and client-facing responsibilities, working with different stakeholders and helping organizations strengthen their security and compliance posture.\nYour responsibilities\nAs a GRC Senior Consultant, you will:\nDefine and validate the scope of cybersecurity assessments, compliance reviews and audits, ensuring alignment with applicable standards and regulatory requirements.\nReview and assess technical documentation, security policies, procedures, regulations and control frameworks.\nConduct interviews and working sessions with stakeholders responsible for security measures, processes and controls.\nCollect, review and validate supporting evidence as part of cybersecurity assessments and audits.\nIdentify potential compliance gaps and provide guidance on how to address them.\nAdvise clients and internal stakeholders on compliance with information security standards, regulations and cybersecurity best practices.\nParticipate in GRC projects related to frameworks and regulations such as PCI DSS, NIST CSF, ISO 27001, ENS, ISO 22301, GDPR, NIS2 and DORA, as well as emerging areas related to AI governance and compliance.\nPrepare clear and comprehensive reports, assessments, findings and project deliverables.\nSupport the coordination and management of cybersecurity and GRC projects, working with multidisciplinary teams and different stakeholders.\nContribute to the development, evolution and continuous improvement of GRC products and services.\nBring a proactive and problem-solving approach to client challenges, identifying opportunities to improve security governance, risk management and compliance processes.\nWhat are we looking for?\nWe would love to hear from you if you have:\nA higher technical degree in Engineering, IT, Telecommunications or a related field.\nAt least 5 years of professional experience in cybersecurity, including a minimum of 3 years of experience in Governance, Risk and Compliance (GRC).\nSolid knowledge of cybersecurity principles, practices and technologies.\nExperience working with security and compliance frameworks and regulations such as: ISO 27001 NIST Cybersecurity Framework (CSF) PCI DSS ENS ISO 22301 GDPR NIS2 DORA AI-related governance and regulatory requirements\nKnowledge of cybersecurity technologies and experience in projects involving the design, implementation or deployment of cybersecurity solutions.\nExperience in project management, team coordination and stakeholder management.\nProfessional proficiency in English, both written and spoken.\nStrong analytical skills and the ability to understand, structure and synthesize complex information.\nExcellent interpersonal and communication skills, with the ability to interact effectively with both technical and non-technical stakeholders.\nA proactive and autonomous way of working.\nCritical thinking and problem-solving skills.\nA collaborative mindset and strong teamwork skills.\nCommitment to continuous improvement.\nCreativity and the ability to find practical solutions to complex cybersecurity and compliance challenges.\nNice to have\nProficiency in Euskera/Basque is highly desirable, although it is not mandatory.\nWorking model\nThis position offers a hybrid working model, combining remote work with regular presence at client offices in the area. For this reason, candidates must be based inBilbao or Vitoria.\nWhy join us?\nIf you are passionate about cybersecurity, risk and compliance, enjoy working in a consulting environment and want to contribute to challenging projects across different security and regulatory frameworks, we would love to hear from you.\nJoin us and help build a safer and more resilient digital future.\nYOUR CAREER AT THALES\nFuture opportunities will allow you to discover other domains or sites. You will be able to evolve and grow your competences in different areas: \nRoom and attention to personal development \nBuild your talents in another domain of Thales Group, discovering new products, new customers, new country or go to a more complex Solution \nChoose between a technical expertise or a leadership path \nBuild an international career within a leading Engineering Group\nAt Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!","description_format":"text","description_chars":6069,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Basque","level":"All levels","optional":true},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Satellite Communications","Satellite Manufacturing","Electronic Warfare","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-09T09:46:02Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":10,"expected_fill_days":52,"reasons":["conf:0","velocity","win:early","comp:brand,attention"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/thales-group-grc-senior-consultant","json_url":"https://alion.io/job/thales-group-grc-senior-consultant.json","meta":{"generated_at":"2026-10-20T22:25:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26236,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":143},"rest":"https://alion.io/mcp/rest/get_company?id=143"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthales-group-grc-senior-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthales-group-grc-senior-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthales-group-grc-senior-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/thales-group-grc-senior-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthales-group-grc-senior-consultant"}]}