Commercial Consultant

Senior GRC Consultant, Information Security We're seeking a Senior GRC Consultant to lead governance, risk and compliance engagements within an established cybersecurity advisory practice.
The information below covers the role requirements, expected candidate experience, and accompanying qualifications.
The RoleYou'll act as a trusted advisor to senior stakeholders, owning end to end delivery of assurance, audit and enablement engagements. This is a client-facing leadership role, shaping security strategy and guiding organisations through complex regulatory landscapes.
ResponsibilitiesAdvise clients on establishing effective cyber governance practices and strategies, including Information Security policies, processes and risk mitigation measuresLead maturity assessments and gap analyses against ISO 27001/27002, NIST CSF, CIS Controls and CyFunGuide clients through regulatory compliance programmes covering NIS2, DORA and GDPREstablish and run Information Security programmes, steering clients toward defined frameworksOwn Information Security Risk Management processes following ISO 27005, including ad hoc project level risk assessmentsDeliver tailored advisory services to CISOs, Risk Officers, DPOs, IT Managers and executive committeesPerform internal, external and pre-certification Information Security auditsProvide subject matter expertise to Internal Auditors on Information Security topicsMentor and develop junior consultants within the practiceLead cybersecurity projects, coordinating stakeholders across client organisationsYour Profile5+ years of relevant information security / GRC experienceDeep knowledge of ISO 27001/27002 and ISO 27005, xlxgzvr with practical implementation and audit experienceStrong understanding of NIS2, DORA and GDPR and their practical applicationProven track record leading cybersecurity projects and managing senior stakeholdersDemonstrated ability to deliver practical, solution-oriented responses to cybersecurity challengesProficiency in English, Dutch and FrenchCertifications strongly preferred: CISSP, CISM, ISO 27001 Lead Auditor/ImplementerLocation: Hybrid in BrusselsLanguages: English (French or Dutch is a bonus)