Senior GRC Manager

NOTE TO RECRUITERS & HIRING TEAMS:

This is an inverted job listing. I am not hiring for this role; I am the professional described below, actively opening conversations for my next engagement.

---

ABOUT THE ROLE & CANDIDATE PROFILE:

A seasoned Senior GRC & Information Security Leader with over 20 years of hands-on technology, enterprise infrastructure, and cybersecurity governance experience across Europe.

KEY RESPONSIBILITIES & CAPABILITIES:

• Enterprise Frameworks: Design, implement, and audit governance programs aligned with ISO/IEC 27001 (Lead Auditor certified), ISO 42001 (AI Management Systems), NIST CSF, SOC 2 Type II, and the EU AI Act.

• Regulatory Readiness: Lead gap assessments and audit preparations for NIS2 Directive, GxP/healthcare data compliance, and enterprise data privacy (GDPR DPO).

• Technical Security Engineering: Architect Zero Trust access models, Conditional Access policies, and endpoint security using Microsoft Entra ID, Microsoft Intune, Purview, Microsoft Defender XDR, and Microsoft Sentinel (SIEM).

• Board & Executive Advisory: Bridge the gap between deeply technical engineering challenges and executive risk reporting (KRIs, audit findings, enterprise risk treatment plans).

• Operational Roots: Deep foundation in enterprise IT infrastructure administration (SAP BASIS, Windows Server, Linux/macOS, Cloud estates across Azure, AWS, and GCP).

LOCATION & ENGAGEMENT PREFERENCES:

• Finland: On-site or Hybrid (Helsinki Metropolitan Area / Espoo)

• European Union: 100% Remote

• Contract Type: Open to Full-Time Permanent Employment (FTE) or B2B / Subcontracting engagements

CONTACT & DIRECT CONNECTION:

If your organization needs a battle-tested GRC and Information Security leader to spearhead audits, strengthen cloud posture, or build robust compliance frameworks from the ground up:

• Direct Email: erdalbirinci@gmail.com

• Portfolio & Labs: GRCHub.eu

• LinkedIn: linkedin.com/in/codeforwhat/

Let's bypass standard resume filters and start a direct conversation.