Senior GRC Consultant – Information Security

About the role

We are looking for a Senior GRC Consultant to lead governance, risk and compliance engagements within a well‑established cybersecurity advisory practice. In this client‑facing leadership position you will shape security strategy and guide organisations through complex regulatory landscapes.

Key responsibilities

• Advise clients on cyber governance, information security policies, processes and risk mitigation measures.
• Lead maturity assessments and gap analyses against ISO 27001/27002, NIST CSF and CIS Controls.
• Guide organisations through regulatory compliance programmes covering NIS2, DORA and GDPR.
• Establish and run information security programmes, steering clients toward defined frameworks.
• Own information security risk management processes following ISO 27005, including project‑level risk assessments.
• Deliver internal, external and pre‑certification information security audits.
• Mentor junior consultants and coordinate cybersecurity projects across client organisations.

Required profile

• 5+ years of experience in information security or GRC.
• Deep knowledge of ISO 27001/27002 and ISO 27005 with implementation and audit experience.
• Strong understanding of NIS2, DORA and GDPR and their practical application.
• Proven track record of leading cybersecurity projects and managing senior stakeholders.
• Fluency in English; Dutch or French is a plus.

Required skills

• ISO 27001
• ISO 27002
• ISO 27005
• NIST Cybersecurity Framework (CSF)
• CIS Controls
• NIS2
• DORA
• GDPR