Share this job
The Role
You support end clients in structuring, achieving compliance with, and steering their cybersecurity program. You work on governance, risk analysis and regulatory compliance (NIS2, ISO 27001, DORA, GDPR), in close contact with IT and business leadership. You run maturity audits and gap analyses (ISO 27001, NIS2, CyFun, NIST). You conduct risk analyses (EBIOS RM, ISO 27005) and build treatment plans. You write and maintain security policies, procedures and frameworks (ISMS policy, BCP/DRP, incident management). You lead compliance programs and prepare ISO 27001 certifications. You assess and monitor third-party and supplier security (TPRM). You design security dashboards and KPIs for the executive committee and the CISO. You run awareness campaigns and crisis exercises. You contribute to pre-sales: scoping, estimation, methodology demos, tenders.
Candidate profile
Must-have
3+ years in consulting or in a GRC / information security role
At least 2 complete compliance or certification engagements (ISO 27001, NIS2, or equivalent)
Strong command of frameworks: ISO 27001/27002, NIS2, NIST CSF, GDPR
Ability to engage with C-level stakeholders as well as technical teams
Excellent writing skills and documentation rigor
Nice-to-have
Certifications: ISO 27001 Lead Implementer or Lead Auditor, CISM, CISA, CISSP, CRISC
Knowledge of the Belgian framework: NIS2 transposition, CCB, CyFun
Experience in regulated sectors: finance (DORA), healthcare, energy, public sector
Technical awareness: IAM, cloud security, SOC, vulnerability management
Working environment
Engagements with end clients, in a market driven by NIS2
Certification and training budget (ISO 27001, CISM, CISSP)
Career progression to GRC Manager, Practice Lead or outsourced CISO
Apply to this job!
Find your next career move from +10,000 jobs!
Manage your visibility
Salary, remote work... Define all the criteria that are important to you.
Get discovered
Recruiters come directly to look for their future hires in our CV library.
Join a community
Connect with like-minded tech and IT professionals on a daily basis through our forum.
Cybersecurity GRC Consultant (NIS2 / ISO 27001)
Groupe Aptenia