Cybersecurity GRC Manager

About the role

The Cybersecurity GRC Manager will lead the design, implementation and maintenance of security governance, risk and compliance programs for our client portfolio in Brussels. You will work closely with senior stakeholders to ensure that security policies, standards and controls align with business objectives and regulatory requirements.

Key responsibilities

• Define and maintain security governance frameworks, policies, and standards.
• Lead cyber risk assessments, maintain the risk register and produce executive‑level risk reporting.
• Manage compliance with ISO 27001, NIST, SOC 2 and other applicable regulations.
• Coordinate internal and external audits, track remediation of findings and ensure timely closure.
• Oversee third‑party risk management activities, including assessments and ongoing monitoring.

Required profile

• 7–12 years of hands‑on experience in cybersecurity with strong GRC exposure.
• Proven ability to manage stakeholders and communicate complex security concepts to senior leadership.
• Preferred experience in the Railway domain.
• Relevant certifications such as CISM, CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Auditor.

Required skills

• Risk management and compliance frameworks
• ISO 27001 implementation and auditing
• NIST Cybersecurity Framework
• SOC 2 compliance
• CISM, CISA, CRISC, CISSP certifications