Principal Consultant

Role – Principal Consultant
Technology - Network Security / GRC Engineer (Risk & Compliance – Arcon)
Location – Brussels, Belgium
Experience Range
15+ Years (L2 / L3 / Specialist)
Support Model
Business hours + On-call (as required for audits/compliance cycles)

Role Summary

The GRC Security Engineer is responsible for establishing and managing Governance, Risk, and Compliance (GRC) capabilities in a greenfield environment (no existing GRC tool).
The role includes designing and implementing risk management frameworks, compliance processes, and onboarding Arcon platform (for GRC/PAM integration) to ensure enterprise-wide security governance, audit readiness, and regulatory compliance.

Key Responsibilities

1. GRC Framework Design (Greenfield Setup)

• Define and implement enterprise GRC framework from scratch
• Establish:
  
  • Risk management methodologies
  • Compliance tracking mechanisms
  • Control validation frameworks
• Align with standards such as:
  
  • ISO 27001, NIST CSF, CIS Controls

2. Risk Management

• Perform enterprise risk assessments:
  • Identify, assess, and prioritize risks
  • Conduct risk scoring and impact analysis
• Maintain:
  • Risk registers
  • Risk treatment and mitigation plans
• Track risk remediation execution and closure

3. Compliance Management

• Define and implement compliance framework and control library
• Ensure adherence to:
  • Regulatory requirements
  • Internal security policies
• Perform:
  • Compliance assessments and gap analysis
  • Control testing and validation
• Manage audit lifecycle:
  • Internal audits
  • External/regulatory audits

4. Arcon Implementation (GRC + PAM Integration)

• Support implementation of Arcon platform (new deployment)
• Configure:
  • Access governance and compliance controls
  • Risk monitoring dashboards (if integrated with PAM)
• Integrate Arcon with:
  • Identity and access management systems
  • ITSM / ticketing systems
• Support access risk control, audit logs, and privileged activity tracking

5. Policy, Governance & Documentation

• Define and maintain:
  • Information security policies
  • Standard operating procedures (SOPs)
  • Control documentation
• Drive policy enforcement and governance reviews
• Ensure periodic updates to policies based on regulatory changes

6. Audit & Reporting

• Prepare and present:
  • Risk and compliance dashboards
  • Audit reports and findings
• Track:
  • Non-compliance issues
  • Audit observations and closure
• Provide evidence for audit and certification requirements

7. Stakeholder & Cross-Team Collaboration

• Work with:
  • Security, infrastructure, IAM/PAM teams
  • Business and application owners
• Provide guidance on:
  • Risk acceptance and mitigation strategies
• Act as a bridge between technical teams and compliance stakeholders

Mandatory Skills

Core GRC Skills

• Strong experience in:
  • Risk Management (Risk Register, Risk Assessment)
  • Compliance Management (ISO 27001, NIST, CIS)
• Experience in:
  • Audit support and control validation
  • Policy and governance framework definition

Tooling & Platform

• Experience with:
  • Arcon (or similar PAM/GRC platforms)
• Ability to work in:
  • No-tool / greenfield GRC setup environments
  • Manual processes transitioning to automated solutions

Security & Networking Knowledge

• Good understanding of:
  • Network security, IAM/PAM concepts
  • Infrastructure and application security
• Ability to map technical risks to business impact

Desired / Good-to-Have Skills

• Experience with:
  • GRC tools (ServiceNow GRC, Archer, OneTrust – optional)
  • PAM solutions (Arcon, CyberArk, BeyondTrust)
• Knowledge of:
  • Cloud compliance (AWS/Azure security frameworks)
• Automation and reporting skills (Excel dashboards, Power BI)

Certifications (Preferred)

• CISA / CRISC / ISO 27001 Lead Auditor or Implementer
• CISSP (optional)
• Risk & Compliance certifications

Soft Skills

• Strong analytical and problem-solving capabilities
• Ability to define and structu