BriefYour role
Also known as GRC Analyst · ICT Security Administrator · ICT security administrators · Information security administratorand 6 more
Information Security Analyst (GRC) · Information Security Officer · ISO 27001 Lead Implementer · IT security administrator · Network security administrator · System security administrator
Cybersecurity GRC Consultant is a role in Consulting & Advisory (Financial Services). The family covers management, technology, risk and sector consulting. The core skill is application security and frameworks, and the main work is audit and assurance, ICT risk and operational resilience and operational risk and controls.
The EFO level names are the common scale; job titles differ between employers.
| Level | What the work looks like | Typical years | Typical job titles |
|---|---|---|---|
| L1 Starting out | Learns the job; executes defined tasks with supervision | 0-2 | Banks: Analyst, Junior Analyst, Associate (asset servicing), Trainee, GraduateAsset servicers: Junior, Specialist (entry), Officer |
| L2 Independent | Owns a process end to end; trains L1; first contact for the team's clients | 2-5 | Banks: Analyst / Senior Analyst, AssociateAsset servicers: Specialist, Senior Specialist, Senior Officer |
| L3 Senior or specialist | Deep expertise; handles exceptions and change; represents the function in projects | 5-9 | Banks: Senior Associate, AVP, Assistant ManagerAsset servicers: Senior Specialist, Expert, Team Lead (small team) |
| L4 Leads a team or an area | Manages people or a large process; owns budgets or controls; escalation point | 8-14 | Banks: VP, Manager, Senior ManagerAsset servicers: Team Lead, Manager, Head of Section |
| L5 Leads the function | Accountable for the function in a legal entity or region; sets priorities and standards | 12+ | Banks: Director, Executive Director, Managing Director, Head of functionAsset servicers: Head of Department, Director |
Specialisations share most of the role and differ in the skills listed here.
Also known as GRC Analyst · ICT Security Administrator · ICT security administrators · Information security administrator
Critical skills: Information security governance and compliance, Application security and frameworks, Data protection and privacy law (GDPR, CCPA, DPDP)
Each role lists its skills with a tier and a weight. The weights of one role add up to 100 percent.
Source: the EFO role catalogue, built from the ESCO classification and reviewed by the editors.
The percentage is the skill's share of the role; the bars are drawn relative to the anchor skill, which is shown full.
The work the role takes part in.
The L3 salary range for this role, with its sources, will appear here when the salaries section opens.
Roles that need many of the same skills, by weighted skill overlap, with the skills you would need to add.
91% skill overlap
To add: Trade lifecycle
45% skill overlap
To add: Basel framework and capital, Audit methodology, Risk measures and sensitivities
43% skill overlap
To add: Legal research and regulatory interpretation, Ethical judgment in grey areas, Process mapping and redesign
42% skill overlap
To add: Basel framework and capital, Risk measures and sensitivities, Advanced Microsoft Excel
42% skill overlap
To add: Legal research and regulatory interpretation, Functional analysis between business and IT, Ethical judgment in grey areas
34% skill overlap
To add: Audit methodology, Accounting fundamentals (double entry), International accounting standards (IFRS)