Principal Consultant

h3Role – Principal Consultant /h3h3Technology – Network Security / GRC Engineer (Risk Compliance – Arcon) /h3h3Location – Brussels, Belgium /h3h3Experience Range /h3p15+ Years (L2 / L3 / Specialist) /ph3Support Model /h3pBusiness hours + On-call (as required for audits/compliance cycles) /ph3Role Summary /h3pThe GRC Security Engineer is responsible for establishing and managing Governance, Risk, and Compliance (GRC) capabilities in a greenfield environment (no existing GRC tool). The role includes designing and implementing risk management frameworks, compliance processes, and onboarding Arcon platform (for GRC/PAM integration) to ensure enterprise-wide security governance, audit readiness, and regulatory compliance. /ph3Key Responsibilities /h3ulliGRC Framework Design (Greenfield Setup) /liliDefine and implement enterprise GRC framework from scratch /liliEstablish:ulliRisk management methodologies /liliCompliance tracking mechanisms /liliControl validation frameworks /li /ul /liliAlign with standards such as:ulliISO 27001, NIST CSF, CIS Controls /li /ul /liliRisk Management /liliPerform enterprise risk assessments:ulliIdentify, assess, and prioritize risks /liliConduct risk scoring and impact analysis /li /ul /liliMaintain:ulliRisk registers /liliRisk treatment and mitigation plans /li /ul /liliTrack risk remediation execution and closure /liliCompliance Management /liliDefine and implement compliance framework and control library /liliEnsure adherence to:ulliRegulatory requirements /liliInternal security policies /li /ul /liliPerform:ulliCompliance assessments and gap analysis /liliControl testing and validation /li /ul /liliManage audit lifecycle:ulliInternal audits /liliExternal/regulatory audits /li /ul /liliArcon Implementation (GRC + PAM Integration) /liliSupport implementation of Arcon platform (new deployment) /liliConfigure:ulliAccess governance and compliance controls /liliRisk monitoring dashboards (if integrated with PAM) /li /ul /liliIntegrate Arcon with:ulliIdentity and access management systems /liliITSM / ticketing systems /li /ul /liliSupport access risk control, audit logs, and privileged activity tracking /liliPolicy, Governance Documentation /liliDefine and maintain:ulliInformation security policies /liliStandard operating procedures (SOPs) /liliControl documentation /li /ul /liliDrive policy enforcement and governance reviews /liliEnsure periodic updates to policies based on regulatory changes /liliAudit Reporting /liliPrepare and present:ulliRisk and compliance dashboards /liliAudit reports and findings /li /ul /liliTrack:ulliNon-compliance issues /liliAudit observations and closure /li /ul /liliProvide evidence for audit and certification requirements /liliStakeholder Cross-Team Collaboration /liliWork with:ulliSecurity, infrastructure, IAM/PAM teams /liliBusiness and application owners /li /ul /liliProvide guidance on:ulliRisk acceptance and mitigation strategies /li /ul /liliAct as a bridge between technical teams and compliance stakeholders /li /ulh3Mandatory Skills /h3h3Core GRC Skills /h3ulliStrong experience in:ulliRisk Management (Risk Register, Risk Assessment) /liliCompliance Management (ISO 27001, NIST, CIS) /li /ul /liliExperience in:ulliAudit support and control validation /liliPolicy and governance framework definition /li /ul /li /ulh3Tooling Platform /h3ulliExperience with:ulliArcon (or similar PAM/GRC platforms) /li /ul /liliAbility to work in:ulliNo-tool / greenfield GRC setup environments /liliManual processes transitioning to automated solutions /li /ul /li /ulh3Security Networking Knowledge /h3ulliGood understanding of:ulliNetwork security, IAM/PAM concepts /liliInfrastructure and application security /li /ul /liliAbility to map technical risks to business impact /li /ulh3Desired / Good-to-Have Skills /h3ulliExperience with:ulliGRC tools (ServiceNow GRC, Archer, OneTrust
- optional) /liliPAM solutions (Arcon, CyberArk, BeyondTrust) /li /ul /liliKnowledge of:ulliCloud compliance (AWS/Azure security frameworks) /li /ul /liliAutomation and reporting skills (Excel dashboards, Power BI) /li /ulh3Certifications (Preferred) /h3ulliCISA / CRISC / ISO 27001 Lead Auditor or Implementer /liliCISSP (optional) /liliRisk Compliance certifications /li /ulh3Soft Skills /h3ulliStrong analytical and problem-solving capabilities /liliAbility to define and structure processes in ambiguous or greenfield environments /liliExcellent stakeholder communication /liliStrong documentation and reporting skills /li /ulh3Key Outcomes / Success Metrics /h3ulliEstablishment of end-to-end GRC framework from scratch /liliImproved risk visibility and mitigation tracking /liliSuccessful audit readiness and compliance adherence /liliEffective onboarding and utilization of Arcon platform /liliReduction in compliance gaps and audit findings /li /ulh3About Infosys /h3pInfosys is a global leader in next-generation digital services and consulting. We enable clients in 59 countries to navigate their