Cyber Security Risk Assurance Consultant – GRC

Our client, a leading telecommunications provider, is looking for a Cyber Security Risk Assurance Consultant to act as a bridge between security governance and technical delivery teams. The role focuses on assessing compliance and steering security improvements to ensure network services align with established standards and regulatory requirements.

Responsibilities

• Advise technical teams during project design and execution to ensure alignment with security requirements.
• Review service compliance against NIS2 requirements using test results, vulnerability reports, and penetration test findings.
• Develop remediation plans and document risks arising from security deviations or audit findings.
• Support the integration of security tooling including SIEM, PAM, PKI, and vulnerability scanning.
• Provide security requirements for RfQ and RfP processes and evaluate vendor responses.
• Collaborate with delivery teams to ensure the effectiveness of administrative controls and access reviews.

Requirements

• You have 5+ years of experience in information security and risk management.
• You possess experience with security frameworks and compliance audits like NIS2.
• You have knowledge of security tooling such as SIEM, PAM, PKI, and vulnerability scanners.
• You're able to maintain a helicopter overview while analyzing complex technical projects.
• You possess strong interpersonal skills and a pragmatic approach to finding compromises between governance and operations.
• You have excellent communication skills with the ability to present complex concepts to both technical teams and management.
• You are fluent in English.

Nice to Haves

• Certification in CISSP or CISM.
• Background in telecom, network engineering, or web engineering.
• Knowledge of telecommunication technologies such as 5G, IMS, and IoT.
• Direct experience contributing security requirements to RfQ or RfP processes.
• Knowledge of French and/or Dutch.

Offer

• Start date: ASAP
• Duration: 5 months
• Work regime: Full-time
• Location: Brussels
• Working model: Hybrid (2 days onsite, with Tuesday as a fixed office day)
• Contract: open to both permanent employees and freelancers