Senior GRC Consultant

pApproach Cyber is a trusted cyber resilience partner supporting organisations across Belgium and Switzerland. With more than 25 years of experience, over 100 experts, and 1000+ happy clients, we help companies face an increasingly complex digital world, one where threats accelerate, regulations expand, and resilience has become non-negotiable. /p pThis bend-to-end model /b is what sets us apart: we don’t just advise, we build, operate, and continuously improve, grounded in real incidents and real operational experience. Local. Complete. Pragmatic. /p pWe are currently living a period of genuine growth (both in terms of client demand and geographic ambition). Our GRC team of around 20 experts is at the heart of this momentum, advising organisations across all sectors on how to strengthen their cybersecurity governance, manage risk, and navigate an evolving regulatory landscape. /p pTo keep pace with our ambitions, we are looking for a bSenior GRC Consultant /b who wants more than a consulting role. Someone who wants to contribute to something that is actively being built. /p h3Are you the driver we are looking for? /h3 pYou are a seasoned GRC professional who thrives in complex environments and knows how to translate security challenges into business language. You are as comfortable facilitating a board-level risk conversation as you are rolling up your sleeves to implement an ISMS or guide a client through a NIS2 compliance journey. /p pBut beyond this expertise, what makes you stand out is your benergy /b. You bring ideas, you challenge the status quo, and you are deeply invested in your clients’ success. You want to be part of a team that is growing fast, and you want to grow with it. /p pWhether you are Dutch-speaking or French-speaking, there is a meaningful role for you here, with one important distinction: /p ul libDutch-speaking people: /bFlanders is a strategic priority for Approach Cyber. We have significant ambitions for this region and a growing pipeline of opportunities. As part of your role, you will actively contribute to developing the Flemish market: building relationships, representing Approach at events and industry forums, identifying new opportunities, and acting as a credible face of Approach Cyber with prospects and clients in the region. This is a core part of what we are looking for. /li libFrench-speaking people: /bYour primary focus will be client delivery. That said, your expertise and your network are valuable commercial assets. We will expect you to adopt a consultative selling approach (spotting opportunities during missions, engaging naturally with prospects, and contributing to Approach’s visibility in your professional circles). /li /ul pAs a Senior GRC Consultant, your day-to-day will revolve around three areas: /p ul liPerform cybersecurity maturity assessments using our ACAM® (Approach Cybersecurity Assessment Methodology) and other recognised frameworks. /li liDesign and implement Information Security Management Systems (ISMS) based on ISO 27001, and support clients throughout certification processes. /li liGuide clients through NIS2, DORA, and CRA compliance journeys (from gap analysis to operational implementation). /li liDevelop security roadmaps, define priorities, and translate them into actionable plans that make sense for your client’s business context. /li liLead and coordinate security projects, driving change management and ensuring strategic decisions are turned into concrete results. /li liDeliver CISO-as-a-Service engagements: provide strategic and technical guidance, support governance structures, and help clients manage security incidents when they arise. /li liBuild long-lasting relationships with your clients, as their go-to advisor, not just their consultant. /li liActively represent Approach Cyber in the market: attend events, participate in panels, and build a visible presence in the cybersecurity community. /li liIdentify and develop new business opportunities, leveraging your network and your expertise as your most credible commercial asset. /li liEngage with prospects in a consultative and authentic way /li liReport field insights and market intelligence to help shape our go-to-market approach in the region. /li /ul h3Internal contribution team growth /h3 ul liContribute to the continuous improvement of our methodologies, frameworks, and reusable assets. /li liShare knowledge with the team: market trends, regulatory evolutions, new frameworks, lessons learnt from the field. /li liSupport and mentor junior colleagues, helping them grow and succeed on complex engagements. /li liYou have a bminimum of 3 years of relevant experience /b in GRC, information security consulting, or a similar advisory role. /li liYou hold (or are actively working towards) bcertifications /b in areas such as ISO 27001, NIS2/DORA/CRA compliance, Risk Management, or CISO-as-a-Service. What matters most is that you can bdemonstrate real, hands‑on experience /b in these a