Partager cette offre
The Role
You support end clients in structuring, achieving compliance with, and steering their cybersecurity program. You work on governance, risk analysis and regulatory compliance (NIS2, ISO 27001, DORA, GDPR), in close contact with IT and business leadership. You run maturity audits and gap analyses (ISO 27001, NIS2, CyFun, NIST). You conduct risk analyses (EBIOS RM, ISO 27005) and build treatment plans. You write and maintain security policies, procedures and frameworks (ISMS policy, BCP/DRP, incident management). You lead compliance programs and prepare ISO 27001 certifications. You assess and monitor third-party and supplier security (TPRM). You design security dashboards and KPIs for the executive committee and the CISO. You run awareness campaigns and crisis exercises. You contribute to pre-sales: scoping, estimation, methodology demos, tenders.
Profil recherché
Must-have
3+ years in consulting or in a GRC / information security role
At least 2 complete compliance or certification engagements (ISO 27001, NIS2, or equivalent)
Strong command of frameworks: ISO 27001/27002, NIS2, NIST CSF, GDPR
Ability to engage with C-level stakeholders as well as technical teams
Excellent writing skills and documentation rigor
Nice-to-have
Certifications: ISO 27001 Lead Implementer or Lead Auditor, CISM, CISA, CISSP, CRISC
Knowledge of the Belgian framework: NIS2 transposition, CCB, CyFun
Experience in regulated sectors: finance (DORA), healthcare, energy, public sector
Technical awareness: IAM, cloud security, SOC, vulnerability management
Environnement de travail
Engagements with end clients, in a market driven by NIS2
Certification and training budget (ISO 27001, CISM, CISSP)
Career progression to GRC Manager, Practice Lead or outsourced CISO
Postulez à cette offre !
Trouvez votre prochaine mission parmi +10 000 offres !
Fixez vos conditions
Rémunération, télétravail... Définissez tous les critères importants pour vous.
Faites-vous chasser
Les recruteurs viennent directement chercher leurs futurs talents dans notre CVthèque.
100% gratuit
Aucune commission prélevée sur votre mission freelance.
Cybersecurity GRC Consultant (NIS2 / ISO 27001)
Groupe Aptenia