Cybersecurity GRC Consultant

Il y a 2 jours

Brussels, Belgique Collective.work Temps plein

Job description

Missions

  • Support end clients in structuring, achieving compliance with, and steering their cybersecurity programs

  • Work on governance, risk analysis, and regulatory compliance (NIS2, ISO 27001, DORA, GDPR) in close contact with IT and business leadership

  • Conduct maturity audits and gap analyses (ISO 27001, NIS2, CyFun, NIST)

  • Perform risk analyses (EBIOS RM, ISO 27005) and build treatment plans

  • Write and maintain security policies, procedures, and frameworks (ISMS policy, BCP/DRP, incident management)

  • Lead compliance programs and prepare ISO 27001 certifications

  • Assess and monitor third-party and supplier security (Third Party Risk Management - TPRM)

  • Design security dashboards and KPIs for the executive committee and the CISO

  • Run awareness campaigns and crisis exercises

  • Contribute to pre-sales activities: scoping, estimation, methodology demos, and tenders

Tools & Environment

  • Frameworks and standards: ISO 27001/27002, NIS2, NIST CSF, GDPR, DORA

  • Risk analysis methodologies: EBIOS RM, ISO 27005

  • Security management: ISMS, BCP/DRP, incident management

  • Third Party Risk Management (TPRM)

  • Vulnerability management

  • Identity and Access Management (IAM)

  • Security dashboards and KPIs

  • Certifications and training opportunities: ISO 27001 Lead Implementer/Auditor, CISM, CISA, CISSP, CRISC

Working Conditions

  • Contract types: Permanent (CDI) or Freelance

  • Location: Belgium

  • Partial remote work possible

  • Start date: As soon as possible

  • Duration: 12 months renewable

Requirements

  1. 3+ years in consulting or in a GRC / information security role
  2. At least 2 complete compliance or certification engagements (ISO 27001, NIS2, or equivalent)
  3. Strong command of frameworks: ISO 27001/27002, NIS2, NIST CSF, GDPR
  4. Ability to engage with C-level stakeholders as well as technical teams
  5. Excellent writing skills and documentation rigor
  6. Certifications (nice-to-have): ISO 27001 Lead Implementer or Lead Auditor, CISM, CISA, CISSP, CRISC
  7. Knowledge of the Belgian framework: NIS2 transposition, CCB, CyFun (nice-to-have)
  8. Experience in regulated sectors: finance (DORA), healthcare, energy, public sector (nice-to-have)
  9. Technical awareness: IAM, cloud security, SOC, vulnerability management (nice-to-have)