Cybersecurity GRC Consultant
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
En continuant, vous acceptez nos Conditions d’utilisation & Politique de confidentialité.
Job description
Missions
-
Support end clients in structuring, achieving compliance with, and steering their cybersecurity programs
-
Work on governance, risk analysis, and regulatory compliance (NIS2, ISO 27001, DORA, GDPR) in close contact with IT and business leadership
-
Conduct maturity audits and gap analyses (ISO 27001, NIS2, CyFun, NIST)
-
Perform risk analyses (EBIOS RM, ISO 27005) and build treatment plans
-
Write and maintain security policies, procedures, and frameworks (ISMS policy, BCP/DRP, incident management)
-
Lead compliance programs and prepare ISO 27001 certifications
-
Assess and monitor third-party and supplier security (Third Party Risk Management - TPRM)
-
Design security dashboards and KPIs for the executive committee and the CISO
-
Run awareness campaigns and crisis exercises
-
Contribute to pre-sales activities: scoping, estimation, methodology demos, and tenders
Tools & Environment
-
Frameworks and standards: ISO 27001/27002, NIS2, NIST CSF, GDPR, DORA
-
Risk analysis methodologies: EBIOS RM, ISO 27005
-
Security management: ISMS, BCP/DRP, incident management
-
Third Party Risk Management (TPRM)
-
Vulnerability management
-
Identity and Access Management (IAM)
-
Security dashboards and KPIs
-
Certifications and training opportunities: ISO 27001 Lead Implementer/Auditor, CISM, CISA, CISSP, CRISC
Working Conditions
-
Contract types: Permanent (CDI) or Freelance
-
Location: Belgium
-
Partial remote work possible
-
Start date: As soon as possible
-
Duration: 12 months renewable
Requirements
- 3+ years in consulting or in a GRC / information security role
- At least 2 complete compliance or certification engagements (ISO 27001, NIS2, or equivalent)
- Strong command of frameworks: ISO 27001/27002, NIS2, NIST CSF, GDPR
- Ability to engage with C-level stakeholders as well as technical teams
- Excellent writing skills and documentation rigor
- Certifications (nice-to-have): ISO 27001 Lead Implementer or Lead Auditor, CISM, CISA, CISSP, CRISC
- Knowledge of the Belgian framework: NIS2 transposition, CCB, CyFun (nice-to-have)
- Experience in regulated sectors: finance (DORA), healthcare, energy, public sector (nice-to-have)
- Technical awareness: IAM, cloud security, SOC, vulnerability management (nice-to-have)