Cybersecurity GRC Consultant

Project overview

Missions

Tools & Environment

Working Conditions

• Support end clients in structuring, achieving compliance with, and steering their cybersecurity programs
• Work on governance, risk analysis, and regulatory compliance (NIS2, ISO 27001, DORA, GDPR) in close contact with IT and business leadership
• Conduct maturity audits and gap analyses (ISO 27001, NIS2, CyFun, NIST)
• Perform risk analyses (EBIOS RM, ISO 27005) and build treatment plans
• Write and maintain security policies, procedures, and frameworks (ISMS policy, BCP/DRP, incident management)
• Lead compliance programs and prepare ISO 27001 certifications
• Assess and monitor third-party and supplier security (Third Party Risk Management
• TPRM)
• Design security dashboards and KPIs for the executive committee and the CISO
• Run awareness campaigns and crisis exercises
• Contribute to pre-sales activities: scoping, estimation, methodology demos, and tenders
• Frameworks and standards: ISO 27001/27002, NIS2, NIST CSF, GDPR, DORA
• Risk analysis methodologies: EBIOS RM, ISO 27005
• Security management: ISMS, BCP/DRP, incident management
• Third Party Risk Management (TPRM)
• Vulnerability management
• Identity and Access Management (IAM)
• Security dashboards and KPIs
• Certifications and training opportunities: ISO 27001 Lead Implementer/Auditor, CISM, CISA, CISSP, CRISC
• Contract types: Permanent (CDI) or Freelance
• Location: Belgium
• Partial remote work possible
• Start date: As soon as possible
• Duration: 12 months renewable

Project details

• Start: flexible
• Remote: hybrid
• Location: Brussels, Belgium, BE