What does a GRC Consultant do at noris?
„Good planning, good knowledge of the company structure, good communication and an open-minded manner.”
Interview Michael Schubert
What does a GRC Consultant do?
I monitor and control operational processes and procedures to ensure that they meet the defined standards.
Another important part of my job is to promote the establishment and further development of policies, guidelines and work instructions. I support the creation and updating of these documents in order to provide employees with clear instructions.
It is also my job to promote the interlinking of management systems. This includes working closely with other departments and integrating the various systems to create synergies and ensure effective processes.
As a consultant, I assist the specialist departments and support them in analysing various requirements. I help them find suitable solutions and adapt the management systems accordingly.
I also plan and carry out internal audits to check the effectiveness of the management systems. Furthermore, I also accompany external certification audits and follow up on the results, such as non-conformities, recommendations and observations.
I also analyse and process incidents in order to identify possible weaknesses or potential for improvement and initiate appropriate measures.
Finally, my aim is to promote GRC awareness (governance, risk management, compliance) and to sensitize employees to relevant topics. This is achieved through training and targeted awareness-raising measures, among other things.
How did you get this job?
After I left noris and wanted to return after about 2.5 years, I was in contact with my boss at the time. He drew my attention to this position and after the job sounded very interesting, I applied for it.
However, my first contact with noris was back in 2007, when I was working with my training company as a service provider and carrying out work at DHS. At the time, I thought to myself: “Will I manage to work for such a cool IT company one day?”
And after I finished my technician’s degree in 2014, I came across the “Data Centre Technician” position and everything took its course.
What skills are essential for this?
Communication, eloquence, a good grasp of things. Perhaps even a direct and honest manner.
Do you have any current projects and if so, which ones?
I am currently working on the introduction of the “TÜV TSE” certification. The last projects were the “BSI – IT basic protection” audit and the support of various customer audits. I also completed further training to become an “Energy Management Specialist” as part of my appointment as an “Energy Management Officer”.
„
However, my first contact with noris was back in 2007, when I was working with my training company as a service provider and carrying out work at DHS. At the time, I thought to myself: “Will I manage to work for such a cool IT company one day?“
”
What is most important to you when implementing projects?
Good planning, good knowledge of the company structure, good communication and an open-minded approach. And achieving the best possible results for the company and customers during implementation.
What makes your job so exciting for you and what motivates you?
Insights into the various areas of noris network AG and into the customers’ companies. It motivates me to help noris move forward by working on the various management systems. And helping my colleagues when they are faced with a problem due to our guidelines (of course I like to help as well). Of course, it’s also exciting that the latest and most up-to-date technologies are always available here for technology enthusiasts. Whether it’s servers or programmes or components from air conditioning and electrical engineering, it doesn’t really matter. 🙂
What do you value about your daily work?
The interaction with my colleagues, the togetherness, and helpfulness within the company and the team. And that everyone is accepted and valued for who they are.
What was your biggest success?
Since I’ve been back, the successful “BSI-IT Grundschutz Audit” and of course my return 😉
What further development opportunities are on offer?
I haven’t given that much thought at the moment, as I’ve only been back since November 2022. For me, it’s already a big step to have been appointed Energy Management Officer and possibly to receive another appointment in the near future.
You definitely get the opportunity to take part in various training courses and develop yourself further. But there are no one-way streets at noris.
