GRC Cybersecurity Consultant

About the role

Sopra Steria, a European digital solutions provider with more than 56,000 colleagues in 30 countries, is hiring a GRC Cybersecurity Consultant in Machelen. The consultant strengthens cybersecurity governance and ensures business practices align with EU and national regulatory requirements, advising clients and internal stakeholders and translating complex legislation into practical controls.

Key responsibilities

• Lead compliance and risk initiatives that improve security posture and operational resilience
• Keep governance and controls current as regulations evolve
• Make audits, risk management and remediation practical and measurable
• Ensure operations meet high standards of efficiency, security and legal compliance

Required profile

• Cybersecurity expertise, regulated environments, ISMS and security-by-design, including audits
• Risk and compliance assessments (e.g. maturity, DPIA), compliance evidence and reporting
• Knowledge of NIS2, ISO 27001/2700x, CyFun, GDPR and awareness of the AI Act
• Project and program management, independent execution and pre-sales (RFPs and tenders)
• Client-facing consulting, stakeholder management (CISO, DPO, regulators) and presentation skills
• Analytical, structured, hands-on and solution-oriented approach, with team coordination
• English, plus Dutch and/or French
• Certifications such as ISO 27001 (LI/LA) and CISSP, CISA, CISM, CRISC (plus); ISO 42001 is a plus

What we offer

• Extensive career development opportunities, local and international
• Membership of the Sopra Steria Academy, a network of 56,000 professionals
• A major tech player in Europe known for consulting, digital services and software development