Senior Consultant – Governance, Risk & Compliance

About the role

Lostar is seeking a Senior Consultant to lead its Governance, Risk & Compliance practice. You will work directly with enterprise clients in banking, insurance, energy, telecom and manufacturing, delivering end‑to‑end GRC projects.

Key responsibilities

• Lead GRC engagements from scoping to implementation, including gap analysis, control design, documentation and audit support.
• Advise clients on international standards (ISO 27001, ISO 22301, ISO 20000, ISO 9001, COBIT, ITIL) and regulations (KVKK, GDPR, Turkish sectoral rules).
• Manage 2‑4 parallel projects, track status, scope and timelines, and keep stakeholders informed.
• Prepare and present risk assessments, remediation roadmaps and audit findings to senior management and boards.
• Support clients through certification audits and regulatory examinations.
• Mentor junior consultants and contribute to internal methodology and quality standards.
• Participate in business development activities and research emerging EU regulations (NIS2, DORA, CRA, AI Act).

Required profile

• Minimum 6 years of experience in IT governance, information security management, IT audit or GRC consultancy.
• Proven delivery on projects involving ISO standards, COBIT, ITIL, KVKK or GDPR.
• Professional fluency in Turkish and English (C1 or higher).
• Full‑time availability and willingness to travel for client engagements.

Required skills

• Deep knowledge of ISO 27001, ISO 22301, ISO 20000, ISO 9001, COBIT and ITIL frameworks.
• Experience with data‑protection regulations KVKK and GDPR.
• Project management and audit‑quality documentation skills.
• Relevant certifications such as ISO Lead Auditor, CISA, CRISC, CISM or CISSP.

What we offer

• Exposure to a wide range of regulated sectors and senior‑level decision makers.
• Support for certifications and training (full cost coverage and study time).
• AI‑assisted delivery platform to streamline documentation.
• Clear career path from Senior Consultant to Principal or Practice Lead.
• Hybrid working model, private health insurance, meal and transport support.