Principal Consultant

pbRole – /bPrincipal Consultantbr/bTechnology /b
- Network Security / GRC Engineer (Risk Compliance – Arcon)br/bLocation /b– Brussels, Belgiumbr/bExperience Range /bbr/15+ Years (L2 / L3 / Specialist)br/bSupport Model /bbr/Business hours + On-call (as required for audits/compliance cycles) /ph3Role Summary /h3pThe GRC Security Engineer is responsible for bestablishing and managing Governance, Risk, and Compliance (GRC) capabilities /b in a bgreenfield environment (no existing GRC tool) /b.br/The role includes bdesigning and implementing risk management frameworks, compliance processes, and onboarding Arcon platform (for GRC/PAM integration) /b to ensure benterprise-wide security governance, audit readiness, and regulatory compliance /b. /ph3Key Responsibilities /h3h31. GRC Framework Design (Greenfield Setup) /h3ulliDefine and implement benterprise GRC framework from scratch /b /liliEstablish:br/ulliRisk management methodologies /liliCompliance tracking mechanisms /liliControl validation frameworks /li /ul /liliAlign with standards such as:br/ulliISO 27001, NIST CSF, CIS Controls /li /ul /li /ulh32. Risk Management /h3ulliPerform benterprise risk assessments /b: ulliIdentify, assess, and prioritize risks /liliConduct risk scoring and impact analysis /li /ul /liliMaintain: ulliRisk registers /liliRisk treatment and mitigation plans /li /ul /liliTrack risk remediation execution and closure /li /ulh33. Compliance Management /h3ulliDefine and implement bcompliance framework and control library /b /liliEnsure adherence to: ulliRegulatory requirements /liliInternal security policies /li /ul /liliPerform: ulliCompliance assessments and gap analysis /liliControl testing and validation /li /ul /liliManage audit lifecycle: ulliInternal audits /liliExternal/regulatory audits /li /ul /li /ulh34. Arcon Implementation (GRC + PAM Integration) /h3ulliSupport implementation of bArcon platform /b (new deployment) /liliConfigure: ulliAccess governance and compliance controls /liliRisk monitoring dashboards (if integrated with PAM) /li /ul /liliIntegrate Arcon with: ulliIdentity and access management systems /liliITSM / ticketing systems /li /ul /liliSupport baccess risk control, audit logs, and privileged activity tracking /b /li /ulh35. Policy, Governance Documentation /h3ulliDefine and maintain: ulliInformation security policies /liliStandard operating procedures (SOPs) /liliControl documentation /li /ul /liliDrive bpolicy enforcement and governance reviews /b /liliEnsure periodic updates to policies based on regulatory changes /li /ulh36. Audit Reporting /h3ulliPrepare and present: ulliRisk and compliance dashboards /liliAudit reports and findings /li /ul /liliTrack: ulliNon-compliance issues /liliAudit observations and closure /li /ul /liliProvide evidence for audit and certification requirements /li /ulh37. Stakeholder Cross-Team Collaboration /h3ulliWork with: ulliSecurity, infrastructure, IAM/PAM teams /liliBusiness and application owners /li /ul /liliProvide guidance on: ulliRisk acceptance and mitigation strategies /li /ul /liliAct as a bbridge between technical teams and compliance stakeholders /b /li /ulh3Mandatory Skills /h3h3Core GRC Skills /h3ulliStrong experience in: ullibRisk Management (Risk Register, Risk Assessment) /b /lilibCompliance Management (ISO 27001, NIST, CIS) /b /li /ul /liliExperience in: ulliAudit support and control validation /liliPolicy and governance framework definition /li /ul /li /ulh3Tooling Platform /h3ulliExperience with: ullibArcon (or similar PAM/GRC platforms) /b /li /ul /liliAbility to work in: ullibNo-tool / greenfield GRC setup environments /b /liliManual processes transitioning to automated solutions /li /ul /li /ulh3Security Networking Knowledge /h3ulliGood understanding of: ulliNetwork security, IAM/PAM concepts /liliInfrastructure and application security /li /ul /liliAbility to map btechnical risks to business impact /b /li /ulh3Desired / Good-to-Have Skills /h3ulliExperience with: ulliGRC tools (ServiceNow GRC, Archer, OneTrust – optional) /liliPAM solutions (Arcon, CyberArk, BeyondTrust) /li /ul /liliKnowledge of: ulliCloud compliance (AWS/Azure security frameworks) /li /ul /liliAutomation and reporting skills (Excel dashboards, Power BI) /li /ulh3Certifications (Preferred) /h3ulliCISA / CRISC / ISO 27001 Lead Auditor or Implementer /liliCISSP (optional) /liliRisk Compliance certifications /li /ulh3Soft Skills /h3ulliStrong analytical and problem-solving capabilities /liliAbility to define and structure processes in bambiguous or greenfield environments /b /liliExcellent stakeholder communication /liliStrong documentation and reporting skills /li /ulh3Key Outcomes / Success Metrics /h3ulliEstablishment of bend-to-end GRC framework from scratch /b /liliImproved brisk visibility and mitigation tracking /b /liliSuccessful baudit readiness and compliance adherence /b /liliEffective onboarding and utilization of bArcon platform /b /liliReduction in compliance gaps and a