Senior GRC Consultant

°°° Context of the Role °°° Approach Cyber is a trusted cyber resilience partner supporting organisations across Belgium and Switzerland. With more than 25 years of experience, over 100 experts, and 1000+ happy clients, we help companies face an increasingly complex digital world, one where threats accelerate, regulations expand, and resilience has become non-negotiable .
We uniquely combine strategic advisory, offensive and defensive expertise, SOC operations, and product engineering with the sovereign AXS Guard© managed security platform. This end-to-end model is what sets us apart: we don’t just advise, we build, operate, and continuously improve, grounded in real incidents and real operational experience. Local. Complete. Pragmatic .
We are currently living a period of genuine growth (both in terms of client demand and geographic ambition). Our GRC team of around 20 experts is at the heart of this momentum, advising organisations across all sectors on how to strengthen their cybersecurity governance, manage risk, and navigate an evolving regulatory landscape .
To keep pace with our ambitions, we are looking for a Senior GRC Consultant who wants more than a consulting role. Someone who wants to contribute to something that is actively being built . °°° Are you the driver we are looking for? ° °° You are a seasoned GRC professional who thrives in complex environments and knows how to translate security challenges into business language. You are as comfortable facilitating a board-level risk conversation as you are rolling up your sleeves to implement an ISMS or guide a client through a NIS2 compliance journ ey.
But beyond this expertise, what makes you stand out is your energy. You bring ideas, you challenge the status quo, and you are deeply invested in your clients’ success. You want to be part of a team that is growing fast, and you want to grow with it.
Whether you are Dutch-speaking or French-speaking, there is a meaningful role for you here, with one important distincti
- on: Dutch-speaking people: Flanders is a strategic priority for Approach Cyber. We have significant ambitions for this region and a growing pipeline of opportunities. As part of your role, you will actively contribute to developing the Flemish market: building relationships, representing Approach at events and industry forums, identifying new opportunities, and acting as a credible face of Approach Cyber with prospects and clients in the region. This is a core part of what we are looking
- for.
French-speaking people: Your primary focus will be client delivery. That said, your expertise and your network are valuable commercial assets. We will expect you to adopt a consultative selling approach (spotting opportunities during missions, engaging naturally with prospects, and contributing to Approach’s visibility in your professional circl es). °°° Your responsibilitie s °°° As a Senior GRC Consultant, your day-to-day will revolve around three areas: Client advisory & d
- eliveryPerform cybersecurity maturity assessments using our ACAM® (Approach Cybersecurity Assessment Methodology) and other recognised fram
- eworks.
Design and implement Information Security Management Systems (ISMS) based on ISO 27001, and support clients throughout certification pro
- cesses.
Guide clients through NIS2, DORA, and CRA compliance journeys (from gap analysis to operational implement
- ation).
Develop security roadmaps, define priorities, and translate them into actionable plans that make sense for your client’s business c
- ontext.
Lead and coordinate security projects, driving change management and ensuring strategic decisions are turned into concrete r
- esults.
Deliver CISO-as-a-Service engagements: provide strategic and technical guidance, support governance structures, and help clients manage security incidents when they
- arise.
Build long-lasting relationships with your clients, as their go-to advisor, not just their cons ultant. Market dev
- elopmentActively represent Approach Cyber in the market: attend events, participate in panels, and build a visible presence in the cybersecurity co
- mmunity.
Identify and develop new business opportunities, leveraging your network and your expertise as your most credible commercia
- l asset.
Engage with prospects in a consultative and authe
- ntic wayReport field insights and market intelligence to help shape our go-to-market approach in the region. Internal contribution & te
- am growthContribute to the continuous improvement of our methodologies, frameworks, and reusabl
- e assets.
Share knowledge with the team: market trends, regulatory evolutions, new frameworks, lessons learnt from t
- he field.
Support and mentor junior colleagues, helping them grow and succeed on complex eng agements. °°° P
- rofile °°° You have a minimum of 3 years of relevant experience in GRC, information security consulting, or a similar adv
- isory role.
You hold (or are actively working towards) certifications in areas such