GRC Consultant – Information Security (Mid‑Level)

About the role

We are seeking a mid‑level GRC Consultant to join our cybersecurity advisory practice in Brussels. You will help clients strengthen their information security posture through governance, risk and compliance initiatives across a range of standards and regulations.

Key responsibilities

• Conduct maturity assessments and gap analyses against ISO 27001/27002, NIST CSF and CIS Controls.
• Assist clients in aligning with regulatory frameworks such as NIS2, DORA and GDPR.
• Perform information‑security risk assessments following ISO 27005 and support risk‑management processes.
• Develop and update information‑security policies, procedures and mitigation measures.
• Support internal and pre‑certification audits against recognised standards.
• Prepare clear, actionable reports and documentation for client stakeholders.
• Deliver security‑awareness programmes and enablement activities.

Required profile

• 3+ years of IT experience with hands‑on exposure to information security.
• At least 1 year working with ISO 27001/27002 and security‑awareness programmes.
• Strong analytical and problem‑solving abilities with a solution‑oriented mindset.
• Fluent in English; Dutch or French is a plus.
• Working towards or holding certifications such as ISO 27001 Lead Implementer/Auditor, Security+ or CISM.

Required skills

• ISO 27001
• ISO 27002
• ISO 27005
• NIST Cybersecurity Framework
• CIS Controls
• Risk assessment methodologies
• Security awareness programmes
• GDPR
• NIS2
• DORA

What we offer

• Hybrid work arrangement based in Brussels.
• Opportunities to work on diverse GRC projects for leading organisations.
• Professional development support towards relevant certifications.