GRC Manager

Job Description

High level role description : Cyber Governance, Risk & Compliance leader responsible for structuring and coordinating all GRC‑related activities across Water Tech. This includes conducting and updating risk assessments, ensuring adherence to Veolia cybersecurity rules and regulatory requirements, defining and maintaining security policies, leading and engaging the Water Tech cyber community, and driving the Cyber Awareness program and overall Cyber Roadmap. The role ensures a consistent governance framework and supports decision‑making on risk mitigation and compliance priorities. Hard Skills Broad understanding of cybersecurity governance and risk frameworks Knowledge of NIST, ISO27001, NIS2, CRA, and third‑party management practices Ability to develop, review, and maintain cybersecurity policies Familiarity with Veolia internal rules, compliance requirements, and governance processes Soft Skills Excellent communication in English and French Ability to present technical topics to executive and operational audiences Strong project‑management and coordination capabilities Ability to simplify and translate complex cybersecurity concepts into accessible language Experience 9 years or more