Principal Consultant

Role – Principal Consultant Technology
- Network Security / GRC Engineer (Risk & Compliance – Arcon) Location – Brussels, Belgium Experience Range 15+ Years (L2 / L3 / Specialist) Support Model Business hours + On-call (as required for audits/compliance cycles) Role Summary The GRC Security Engineer is responsible for establishing and managing Governance, Risk, and Compliance (GRC) capabilities in a greenfield environment (no existing GRC tool). The role includes designing and implementing risk management frameworks, compliance processes, and onboarding Arcon platform (for GRC/PAM integration) to ensure enterprise-wide security governance, audit readiness, and regulatory compliance.

Key Responsibilities
• GRC Framework Design (Greenfield Setup)
• Define and implement enterprise GRC framework from scratch
• Establish:
• Risk management methodologies
• Compliance tracking mechanisms
• Control validation frameworks
• Align with standards such as:
• ISO 27001, NIST CSF, CIS Controls
• Risk Management
• Perform enterprise risk assessments:
• Identify, assess, and prioritize risks
• Conduct risk scoring and impact analysis
• Maintain:
• Risk registers
• Risk treatment and mitigation plans
• Track risk remediation execution and closure
• Compliance Management
• Define and implement compliance framework and control library
• Ensure adherence to:
• Regulatory requirements
• Internal security policies
• Perform:
• Compliance assessments and gap analysis
• Control testing and validation
• Manage audit lifecycle:
• Internal audits
• External/regulatory audits
• Arcon Implementation (GRC + PAM Integration)
• Support implementation of Arcon platform (new deployment)
• Configure:
• Access governance and compliance controls
• Risk monitoring dashboards (if integrated with PAM)
• Integrate Arcon with:
• Identity and access management systems
• ITSM / ticketing systems
• Support access risk control, audit logs, and privileged activity tracking
• Policy, Governance & Documentation
• Define and maintain:
• Information security policies
• Standard operating procedures (SOPs)
• Control documentation
• Drive policy enforcement and governance reviews
• Ensure periodic updates to policies based on regulatory changes
• Audit & Reporting
• Prepare and present:
• Risk and compliance dashboards
• Audit reports and findings
• Track:
• Non-compliance issues
• Audit observations and closure
• Provide evidence for audit and certification requirements
• Stakeholder & Cross-Team Collaboration
• Work with:
• Security, infrastructure, IAM/PAM teams
• Business and application owners
• Provide guidance on:
• Risk acceptance and mitigation strategies
• Act as a bridge between technical teams and compliance stakeholders Mandatory Skills Core GRC Skills
• Strong experience in:
• Risk Management (Risk Register, Risk Assessment)
• Compliance Management (ISO 27001, NIST, CIS)
• Experience in:
• Audit support and control validation
• Policy and governance framework definition Tooling & Platform
• Experience with:
• Arcon (or similar PAM/GRC platforms)
• Ability to work in:
• No-tool / greenfield GRC setup environments
• Manual processes transitioning to automated solutions Security & Networking Knowledge
• Good understanding of:
• Network security, IAM/PAM concepts
• Infrastructure and application security
• Ability to map technical risks to business impact Desired / Good-to-Have Skills
• Experience with:
• GRC tools (ServiceNow GRC, Archer, OneTrust – optional)
• PAM solutions (Arcon, CyberArk, BeyondTrust)
• Knowledge of:
• Cloud compliance (AWS/Azure security frameworks)
• Automation and reporting skills (Excel dashboards, Power BI) Certifications (Preferred)
• CISA / CRISC / ISO 27001 Lead Auditor or Implementer
• CISSP (optional)
• Risk & Compliance certifications Soft Skills
• Strong analytical and problem-solving capabilities
• Ability to define and structure processes in ambiguous or greenfield environments
• Excellent stakeholder communication
• Strong documentation and reporting skills Key Outcomes / Success Metrics
• Establishment of end-to-end GRC framework from scratch
• Improved risk visibility and mitigation tracking
• Successful audit readiness and compliance adherence
• Effective onboarding and utilization of Arcon platform
• Reduction in compliance gaps and audit findings About Infosys Infosys is a global leader in next-generation digital services and consulting. We enable clients in 59 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer clients, in 59 countries, as they navigate their digital transformation powered by cloud and AI. We enable them with an AI-first core, empower the business with agile digital at scale and drive continuous improvement with always-on learning through the transfer of digital skills, expertise, and ideas from our innovation ecosystem. We are deeply committed to being a well-governed, environmentally sustainable organization where diverse talent thrives in an inclusive workplace.