Cyber Security GRC Business Analyst (Freelance)

About the role

We are looking for a freelance Cyber Security GRC Business Analyst to join Proximus’ new Belgian centre of excellence that combines artificial intelligence and cybersecurity. The role will focus on translating governance, risk and compliance (GRC) processes into functional solutions on the ServiceNow IRM platform, supporting risk, compliance, audit and third‑party risk management (TPRM) activities.

Key responsibilities

• Gather and analyse GRC requirements from process owners and end‑users, converting them into epics, user stories and acceptance criteria.
• Configure and maintain ServiceNow IRM modules covering Risk Management, Compliance/Internal Control, Audit Management and TPRM.
• Design user‑centric workflows that minimise clicks, ensure consistent forms and provide meaningful notifications.
• Execute small platform changes such as form adaptations, field behaviours, simple workflow tweaks, notifications and basic reporting adjustments.
• Support UAT by defining test scenarios, coordinating stakeholder testing and validating delivered changes against acceptance criteria.
• Ensure data quality and scalable reporting by maintaining clean object relationships and reusable reporting structures.

Required profile

• Minimum 3 years experience as a Business Analyst working with ServiceNow IRM.
• Proven ability to translate business processes into technical specifications and user stories.
• Strong understanding of GRC concepts, risk management, compliance and audit processes.
• Fluent English communication skills.

Required skills

• ServiceNow IRM
• ServiceNow platform configuration
• ServiceNow reporting and dashboard creation

What we offer

• Freelance contract from 1 June 2026 to 31 December 2026 (40 hrs/week).
• Competitive rate of €70‑€75 per hour.
• Opportunity to work within a cutting‑edge AI‑driven cybersecurity environment.